Improper Authentication in Intel NUC M15 Laptop Kit Management Engine Driver Pack
CVE-2021-33087

5.5MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) Nuc M15 Laptop Kit Management Engine Driver Pack
Vendor
CVE Published:
17 November 2021

Summary

The installer for the Intel NUC M15 Laptop Kit Management Engine Driver Pack prior to version 15.0.10.1508 contains a flaw that may allow an authenticated user to exploit local access, potentially leading to a denial of service condition. This issue underscores the importance of securing installation processes and highlights the need for timely updates to mitigate such risks.

Affected Version(s)

Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.