CVE-2023-35061

What it actually does

Improper initialization in Intel PROSet/Wireless and Killer Wi-Fi software before version 22.240 exposes uninitialized memory contents to adjacent unauthenticated users over the wireless medium.

Why it matters to the business

Nearby attackers may obtain limited sensitive information from affected systems, potentially aiding reconnaissance or further targeted attacks with minimal direct operational disruption.

How an attack unfolds

An attacker positioned on the same wireless network sends specially crafted 802.11 frames that trigger the uninitialized memory path, causing the driver to return portions of kernel or user memory containing potentially sensitive data.

How to fix it

Upgrade Intel PROSet/Wireless and Killer Wi-Fi software to version 22.240 or later on all affected systems.

How to confirm the fix worked

Verify the installed driver and software package version is 22.240 or higher using vendor tools or system inventory queries.

Typical attack path

1. Gain adjacent network access via Wi-Fi
2. Transmit crafted management or data frames targeting the vulnerable driver
3. Receive and parse the disclosed memory contents
4. Use extracted information for follow-on attacks

How to detect it

Scan endpoint inventories for Intel wireless driver versions older than 22.240; inspect wireless driver logs for anomalous frame handling or memory access events.

What your security team should do

• Apply the 22.240 update across all endpoints with Intel wireless adapters
• Disable unnecessary adjacent wireless access where feasible
• Include the affected software versions in routine vulnerability scans