CVE-2025-35963
📋 TL;DR
A vulnerability in Intel PROSet/Wireless WiFi Software for Windows allows unprivileged local users to cause denial of service via adjacent network access. This affects systems running vulnerable versions of Intel wireless drivers, potentially disrupting WiFi connectivity and system availability.
💻 Affected Systems
- Intel PROSet/Wireless WiFi Software for Windows
⚠️ Manual Verification Required
This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.
Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).
🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.
- Review the CVE details at NVD
- Check vendor security advisories for your specific version
- Test if the vulnerability is exploitable in your environment
- Consider updating to the latest version as a precaution
⚠️ Risk & Real-World Impact
Worst Case
Complete disruption of WiFi connectivity and potential system instability requiring reboot, affecting availability of network-dependent services.
Likely Case
Temporary WiFi service disruption affecting local users on the same network segment, requiring driver restart or system reboot.
If Mitigated
Minimal impact with proper network segmentation and updated drivers, limited to isolated network segments.
🎯 Exploit Status
Attack requires adjacent network access but no authentication or user interaction. Low complexity attack according to CVSS.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 23.160 or later
Vendor Advisory: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01398.html
Restart Required: Yes
Instructions:
1. Download Intel Driver & Support Assistant from Intel website. 2. Run the tool to detect vulnerable drivers. 3. Follow prompts to update to version 23.160 or later. 4. Restart system after installation completes.
🔧 Temporary Workarounds
Network Segmentation
allIsolate vulnerable systems on separate network segments to limit attack surface
Disable Vulnerable Adapter
windowsTemporarily disable Intel wireless adapter if not critical
netsh interface set interface "Wi-Fi" admin=disable
🧯 If You Can't Patch
- Implement strict network segmentation to isolate vulnerable systems
- Monitor for unusual network traffic patterns and WiFi service disruptions
🔍 How to Verify
Check if Vulnerable:
Check driver version in Device Manager under Network adapters > Intel(R) Wireless adapter > Driver tab
Check Version:
wmic path win32_pnpsigneddriver where "devicename like '%Intel%Wireless%'" get devicename, driverversion
Verify Fix Applied:
Verify driver version is 23.160 or higher in Device Manager
📡 Detection & Monitoring
Log Indicators:
- Unexpected WiFi adapter resets
- Driver crash events in Windows Event Log
- System logs showing network connectivity loss
Network Indicators:
- Unusual broadcast/multicast traffic patterns
- ARP spoofing attempts on local segment
SIEM Query:
EventID=1001 OR EventID=1000 Source="Intel Wireless Driver" OR "WiFi service stopped unexpectedly"