CVE-2021-33094

Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:nuc_m15_laptop_kit_keyboard_led_service_driver_pack:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc510:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_m15_laptop_kit_lapbc710:-:*:*:*:*:*:*:*

History

21 Nov 2024, 06:08

Type Values Removed Values Added
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html - Vendor Advisory

Information

Published : 2021-11-17 19:15

Updated : 2024-11-21 06:08


NVD link : CVE-2021-33094

Mitre link : CVE-2021-33094

CVE.ORG link : CVE-2021-33094


JSON object : View

Products Affected

intel

  • nuc_m15_laptop_kit_lapbc710
  • nuc_m15_laptop_kit_keyboard_led_service_driver_pack
  • nuc_m15_laptop_kit_lapbc510
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource