CVE-2022-28667

What it actually does

Out-of-bounds write in Intel PROSet/Wireless WiFi software before version 22.140 allows an unauthenticated adjacent attacker to trigger a denial of service by corrupting memory structures during wireless frame processing.

Why it matters to the business

Wireless adapters on affected Intel hardware can be forced offline, interrupting network connectivity for laptops and desktops using these chips and requiring manual restarts or driver reloads to recover.

How an attack unfolds

An attacker positioned on the same Wi-Fi network crafts and transmits specially formatted 802.11 frames that trigger the out-of-bounds write inside the vulnerable driver or firmware, causing the wireless stack to crash and drop the connection without authentication.

How to fix it

Upgrade Intel PROSet/Wireless WiFi software to version 22.140 or later on all affected systems; apply the latest firmware updates for listed Intel Wi-Fi 6E, Wi-Fi 6, and Wireless-AC adapters; disable the affected wireless interfaces if updates cannot be applied immediately.

How to confirm the fix worked

Verify the installed PROSet/Wireless version is 22.140 or newer via the Intel Driver & Support Assistant or Windows Device Manager; confirm firmware revisions on each adapter match the vendor's current release notes; re-test wireless connectivity after applying updates.

Typical attack path

1. Attacker gains adjacent wireless access to the target network
2. Attacker sends crafted 802.11 management or data frames targeting the Intel wireless driver
3. Driver performs unchecked memory write leading to corruption
4. Wireless interface resets or the system experiences a crash resulting in denial of service

How to detect it

Review wireless driver event logs and Windows system logs for repeated adapter resets or crashes coinciding with unusual 802.11 traffic patterns; correlate with network monitoring for unexpected deauthentication or disassociation frames directed at Intel MAC addresses.

What your security team should do

• Prioritize inventory of all systems using the listed Intel wireless adapters and schedule driver/firmware updates
• Monitor vendor release channels for any additional firmware fixes beyond version 22.140
• Consider network segmentation or wireless isolation for high-value endpoints until patches are deployed