CVE Feed

    Dashboard / CVE / CVE-2021-33087

    CVE-2021-33087

    Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.

    Published:Nov 17, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 17, 2021
    EPSS Score:0.0005
    CVSS Score:5.5

    Affected Products

    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc510
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc710
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Management Engine Driver Pack

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2024-25561 (CVSS 5.4) — Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 ma…
    CVE-2023-40540 (CVSS 4.1) — Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile…
    CVE-2023-22444 (CVSS 6) — Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R)…
    CVE-2023-22312 (CVSS 7.2) — Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable …
    CVE-2022-32569 (CVSS 7.5) — Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.00…
    CVE-2022-40261 (CVSS 8.2) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40250 (CVSS 8.8) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40246 (CVSS 7.2) — A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resu…
    CVE-2022-26873 (CVSS 8.2) — A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent b…
    CVE-2021-33086 (CVSS 5.5) — Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable d…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High