Privilege Escalation Vulnerability in Intel Ethernet Products

CVE-2021-33158

What is CVE-2021-33158?

An issue has been identified in specific Intel Ethernet Adapters and the Intel Ethernet Controller I225, where improper neutralization in the firmware can be exploited by a privileged user. This vulnerability could allow an attacker with local access to the system to escalate their privileges, potentially leading to unauthorized actions or access within the system. System administrators and users employing affected hardware should ensure they are aware of this issue and consider the necessary configurations and updates provided by Intel to mitigate potential risks.

References