CVE Feed

    Dashboard / CVE / CVE-2021-33093

    CVE-2021-33093

    Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Nov 17, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 17, 2021
    EPSS Score:0.00029
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc510
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Lapbc710
    Vendor
    Intel
    Product
    Nuc M15 Laptop Kit Serial Io Driver Pack

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-25561 (CVSS 5.4) — Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 ma…
    CVE-2023-40540 (CVSS 4.1) — Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privile…
    CVE-2023-22444 (CVSS 6) — Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R)…
    CVE-2023-22312 (CVSS 7.2) — Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable …
    CVE-2022-32569 (CVSS 7.5) — Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.00…
    CVE-2022-40261 (CVSS 8.2) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40250 (CVSS 8.8) — An attacker can exploit this vulnerability to elevate privileges from ring 0 to ring -2, execute arbitrary cod…
    CVE-2022-40246 (CVSS 7.2) — A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resu…
    CVE-2022-26873 (CVSS 8.2) — A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent b…
    CVE-2021-33086 (CVSS 5.5) — Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable d…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High