Improper Authentication in Intel NUC HDMI Firmware Update Tool Affects Multiple NUC Models
CVE-2021-0096

7.8HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Nuc Hdmi Firmware Update Tool For Nuc7i3dn, Nuc7i5dn, Nuc7i7dn
Vendor
CVE Published:
17 November 2021

Summary

The Intel(R) NUC HDMI Firmware Update Tool has a vulnerability in its software installer that may allow an authenticated user to escalate their privileges through local access. This affects models NUC7i3DN, NUC7i5DN, and NUC7i7DN prior to version 1.78.1.1, posing a significant security risk for users.

Affected Version(s)

Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.