Lucene search

[email protected]CVE-2021-0082

HistoryNov 17, 2021 - 8:15 p.m.

CVE-2021-0082

2021-11-1720:15:00

CWE-427

[email protected]

web.nvd.nist.gov

cve-2021-0082

uncontrolled search path

software installer

intel

proset

wireless wifi

windows 10

privilege escalation

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.9%

JSON

Uncontrolled search path in software installer for Intel® PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:ax210_firmwareintel ax210 firmwarelt22.40
intel:ax201_firmwareintel ax201 firmwarelt22.40
intel:ax200_firmwareintel ax200 firmwarelt22.40
intel:ac_9560_firmwareintel ac 9560 firmwarelt22.40
intel:ac_9462_firmwareintel ac 9462 firmwarelt22.40
intel:ac_9461_firmwareintel ac 9461 firmwarelt22.40
intel:ac_9260_firmwareintel ac 9260 firmwarelt22.40
intel:ac_8265_firmwareintel ac 8265 firmwarelt22.40
intel:ac_8260_firmwareintel ac 8260 firmwarelt22.40
intel:ac_3168_firmwareintel ac 3168 firmwarelt22.40

CPE	Name	Operator	Version
intel:ax210_firmware	intel ax210 firmware	lt	22.40
intel:ax201_firmware	intel ax201 firmware	lt	22.40
intel:ax200_firmware	intel ax200 firmware	lt	22.40
intel:ac_9560_firmware	intel ac 9560 firmware	lt	22.40
intel:ac_9462_firmware	intel ac 9462 firmware	lt	22.40
intel:ac_9461_firmware	intel ac 9461 firmware	lt	22.40
intel:ac_9260_firmware	intel ac 9260 firmware	lt	22.40
intel:ac_8265_firmware	intel ac 8265 firmware	lt	22.40
intel:ac_8260_firmware	intel ac 8260 firmware	lt	22.40
intel:ac_3168_firmware	intel ac 3168 firmware	lt	22.40

Rows per page:

1-10 of 151

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00509.html

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

25.9%

JSON

Related for CVE-2021-0082

cvelist1 prion1 hp1 intel1