Lucene search

[email protected]CVE-2021-33087

HistoryNov 17, 2021 - 7:15 p.m.

CVE-2021-33087

2021-11-1719:15:08

CWE-287

[email protected]

web.nvd.nist.gov

cve-2021-33087

improper authentication

intel nuc

nuc m15

management engine

dos

denial of service

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Improper authentication in the installer for the Intel® NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access.

Affected configurations

Vulners

NVD

Node

intelnuc_m15_laptop_kit_management_engine_driver_packRange<15.0.10.1508

CPENameOperatorVersion
intel:nuc_m15_laptop_kit_management_engine_driver_packintel nuc m15 laptop kit management engine driver packlt15.0.10.1508

CPE	Name	Operator	Version
intel:nuc_m15_laptop_kit_management_engine_driver_pack	intel nuc m15 laptop kit management engine driver pack	lt	15.0.10.1508

CNA Affected

[
  {
    "product": "Intel(R) NUC M15 Laptop Kit Management Engine driver pack",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "before version 15.0.10.1508"
      }
    ]
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html

4.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-33087

prion1 cvelist1 nvd1 intel1