Privilege Escalation Vulnerability in Intel Ethernet Adapters and Controllers
CVE-2021-33145

7.2HIGH

Key Information:

Summary

An exception handling flaw in specific Intel Ethernet Adapters and the Intel Ethernet Controller I225 Manageability firmware could allow a privileged user to escalate privileges through local access. This issue arises from an uncaught exception that may be exploited to gain elevated privileges within the affected systems. Organizations using these products should assess their security measures and consider implementing mitigation strategies to reduce potential risks associated with unauthorized privilege escalation.

Affected Version(s)

Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware See references

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.