CVE-2021-33091

Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:nuc_m15_laptop_kit_audio_driver_pack:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*

History

22 Nov 2021, 13:58

Type Values Removed Values Added
CPE cpe:2.3:a:intel:nuc_m15_laptop_kit_audio_driver_pack:*:*:*:*:*:*:*:* cpe:2.3:o:intel:nuc_m15_laptop_kit_audio_driver_pack:*:*:*:*:*:*:*:*

19 Nov 2021, 19:21

Type Values Removed Values Added
CPE cpe:2.3:a:intel:nuc_m15_laptop_kit_audio_driver_pack:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*
CWE CWE-732
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html - Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : 7.2
v3 : 7.8

17 Nov 2021, 19:24

Type Values Removed Values Added
New CVE

Information

Published : 2021-11-17 19:15

Updated : 2023-12-10 14:09


NVD link : CVE-2021-33091

Mitre link : CVE-2021-33091

CVE.ORG link : CVE-2021-33091


JSON object : View

Products Affected

intel

  • nuc_m15_laptop_kit_audio_driver_pack
  • nuc_m15_laptop_kit_lapbc710
  • nuc_m15_laptop_kit_lapbc510
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource