Vulnerability in Intel Nuc Hdmi Firmware Update Tool
CVE-2021-33089
Improper access control in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before version 1.78.4.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS: 0.002 (15.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Intel Nuc_hdmi_firmware_update_tool
- Intel Nuc_kit_nuc8i3be
- Intel Nuc_kit_nuc8i5be
- Intel Nuc_kit_nuc8i7be
- N/a Intel(r) Nuc Hdmi Firmware Update Tool For Nuc8i3be, Nuc8i5be, Nuc8i7be — versions before version 1.78.4.0.4
References
- secure@intel.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-33089?
- CVE-2021-33089 is a high-severity vulnerability in Intel Nuc Hdmi Firmware Update Tool. CVSS score: 7.8/10. Published 2021-11-17.
- How severe is CVE-2021-33089?
- High severity. CVSS v3 base score is 7.8 out of 10.