What is CVE-2021-0104?

CVE-2021-0104 is a high-severity vulnerability in Intel Rapid Storage Technology, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-06-09.

How severe is CVE-2021-0104?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Intel Rapid Storage Technology

CVE-2021-0104

Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.005 (42.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Rapid_storage_technology
N/a Intel(r) Rapid Storage Technology Software, — versions before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24,

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-0104?: CVE-2021-0104 is a high-severity vulnerability in Intel Rapid Storage Technology, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-06-09.
How severe is CVE-2021-0104?: High severity. CVSS v3 base score is 7.8 out of 10.