Privilege Escalation Vulnerability in Intel Ethernet Adapters and Controllers
CVE-2021-33157

7.2HIGH

Key Information:

Summary

A vulnerability exists due to insufficient control flow management in certain Intel Ethernet Adapters and the Intel Ethernet Controller I225 Manageability firmware. This flaw could allow a privileged user with local access to potentially escalate their privileges, leading to unauthorized actions on the system. The implications of this vulnerability emphasize the need for users and administrators to be vigilant in applying updates and patches from Intel's advisories to mitigate potential risks associated with this security concern.

Affected Version(s)

Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware See references

References

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.