Skip to content
Fencer Intel
high 8.8

CVE-2020-12321 json

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to pote…

published 5y ago modified last mo. also EUVD-2020-4633

cvss
8.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
1.0%
EPSS 1.0% chance of exploitation in 30 days, percentile 62%
public exploits
0
none known

Summary

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Patch / fix

  • intel dual_band_wireless-ac_3168_firmware 21.110
  • intel dual_band_wireless-ac_8260_firmware 21.110
  • intel dual_band_wireless-ac_8265_firmware 21.110
  • intel wi-fi_6_ax200_firmware 21.110
  • intel wi-fi_6_ax201_firmware 21.110
  • intel wireless-ac_9260_firmware 21.110
  • intel wireless-ac_9461_firmware 21.110
  • intel wireless-ac_9462_firmware 21.110
  • intel wireless-ac_9560_firmware 21.110
  • intel wireless_7265_(rev_d)_firmware 21.110
  • intel dual_band_wireless-ac_3165_firmware 21.110
  • linux-firmware RHEL 7 20200421-80.git78c0348.el7_9
  • iwl100-firmware RHEL 7 39.31.5.1-80.el7_9
  • iwl105-firmware RHEL 7 18.168.6.1-80.el7_9
  • iwl135-firmware RHEL 7 18.168.6.1-80.el7_9
  • iwl1000-firmware RHEL 7 1:39.31.5.1-80.el7_9
  • iwl2000-firmware RHEL 7 18.168.6.1-80.el7_9
  • iwl2030-firmware RHEL 7 18.168.6.1-80.el7_9
  • iwl3160-firmware RHEL 7 25.30.13.0-80.el7_9

red hat advisories RHSA-2022:7887RHSA-2021:0339RHSA-2021:0183RHSA-2020:5479RHSA-2020:5416

  • kernel-firmware SLES for SAP 12 SP3, SLES for SAP 12 SP2, SLES 12 SP3-LTSS +8 more 20170530-21.31.1
  • kernel-firmware SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES 12 SP5 +3 more 20190618-5.14.1
  • kernel-firmware SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 20191118-3.34.1
  • kernel-firmware SLE Module for Basesystem 15 SP2, SLE Module for Basesystem 15 SP1 20200107-3.15.1

suse advisories SUSE-SU-2020:3354-1SUSE-SU-2020:3353-1SUSE-SU-2020:3349-1SUSE-SU-2020:3330-1

  • kernel-firmware openSUSE Leap 15.2 20200107-lp152.2.3.1
  • kernel-firmware openSUSE Leap 15.1 20200107-lp151.2.15.1

opensuse advisories openSUSE-SU-2020:1962-1openSUSE-SU-2020:1960-1

Is CVE-2020-12321 in your stack? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-12321 updated cvss 8.8

hardware: buffer overflow in bluetooth firmware

  • Red Hat Enterprise Linux BaseOS (v. 8) iwl100-firmware 39.31.5.1-101.el8_3.1, iwl5150-firmware 8.24.2.2-101.el8_3.1, iwl1000-firmware 39.31.5.1-101.el8_3.1, iwl105-firmware 18.168.6.1-101.el8_3.1, iwl135-firmware 18.168.6.1-101.el8_3.1, iwl3945-firmware 15.32.2.9-101.el8_3.1, +15 more
    fixed: vendor fix RHSA-2020:5479
  • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) linux-firmware 20190516-96.git711d3297.el8_1
    fixed: vendor fix RHSA-2021:0183
  • Red Hat Enterprise Linux BaseOS EUS (v. 8.2) iwl100-firmware 39.31.5.1-99.el8_2.1, iwl5150-firmware 8.24.2.2-99.el8_2.1, iwl1000-firmware 39.31.5.1-99.el8_2.1, iwl105-firmware 18.168.6.1-99.el8_2.1, iwl135-firmware 18.168.6.1-99.el8_2.1, iwl3945-firmware 15.32.2.9-99.el8_2.1, +15 more
    fixed: vendor fix RHSA-2020:5416
  • Red Hat Enterprise Linux Client (v. 7) iwl100-firmware 39.31.5.1-80.el7_9, iwl5150-firmware 8.24.2.2-80.el7_9, iwl1000-firmware 39.31.5.1-80.el7_9, iwl105-firmware 18.168.6.1-80.el7_9, iwl135-firmware 18.168.6.1-80.el7_9, iwl3945-firmware 15.32.2.9-80.el7_9, +11 more Red Hat Enterprise Linux Server (v. 7) iwl100-firmware 39.31.5.1-80.el7_9, iwl5150-firmware 8.24.2.2-80.el7_9, iwl1000-firmware 39.31.5.1-80.el7_9, iwl105-firmware 18.168.6.1-80.el7_9, iwl135-firmware 18.168.6.1-80.el7_9, iwl3945-firmware 15.32.2.9-80.el7_9, +11 more
    fixed: vendor fix RHSA-2021:0339
  • Red Hat Enterprise Linux Server AUS (v. 7.7) iwl100-firmware 39.31.5.1-73.el7_7, iwl3160-firmware 22.0.7.0-73.el7_7, iwl5150-firmware 8.24.2.2-73.el7_7, iwl7260-firmware 22.0.7.0-73.el7_7, iwl7265-firmware 22.0.7.0-73.el7_7, iwl1000-firmware 39.31.5.1-73.el7_7, +12 more Red Hat Enterprise Linux Server E4S (v. 7.7) iwl100-firmware 39.31.5.1-73.el7_7, iwl3160-firmware 22.0.7.0-73.el7_7, iwl5150-firmware 8.24.2.2-73.el7_7, iwl7260-firmware 22.0.7.0-73.el7_7, iwl7265-firmware 22.0.7.0-73.el7_7, iwl1000-firmware 39.31.5.1-73.el7_7, +12 more Red Hat Enterprise Linux Server TUS (v. 7.7) iwl100-firmware 39.31.5.1-73.el7_7, iwl3160-firmware 22.0.7.0-73.el7_7, iwl5150-firmware 8.24.2.2-73.el7_7, iwl7260-firmware 22.0.7.0-73.el7_7, iwl7265-firmware 22.0.7.0-73.el7_7, iwl1000-firmware 39.31.5.1-73.el7_7, +12 more
    fixed: vendor fix RHSA-2022:7887
  • Red Hat Enterprise Linux Workstation (v. 7) iwl100-firmware 39.31.5.1-80.el7_9, iwl5150-firmware 8.24.2.2-80.el7_9, iwl1000-firmware 39.31.5.1-80.el7_9, iwl105-firmware 18.168.6.1-80.el7_9, iwl135-firmware 18.168.6.1-80.el7_9, iwl3945-firmware 15.32.2.9-80.el7_9, +11 more
    fixed: vendor fix RHSA-2021:0339
  • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) iwl100-firmware 39.31.5.1-96.el8_1.1, iwl5150-firmware 8.24.2.2-96.el8_1.1, iwl1000-firmware 39.31.5.1-96.el8_1.1, iwl105-firmware 18.168.6.1-96.el8_1.1, iwl135-firmware 18.168.6.1-96.el8_1.1, iwl3945-firmware 15.32.2.9-96.el8_1.1, +14 more
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
last mo.

Exploit prediction

0.98% chance of exploitation in the next 30 days, higher than 62% of all scored CVEs (FIRST EPSS, 2026-11-09).

CVSS scores

assigned by version score vector
NVD 3.1 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 5.8 AV:A/AC:L/Au:N/C:P/I:P/A:P

Affected products

  • n/a Intel(R) Wireless Bluetooth(R)

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.