Vulnerability Description
Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Nuc Hdmi Firmware Update Tool | < 1.78.2.0.7 |
| Intel | Nuc10I3Fn | - |
| Intel | Nuc10I5Fn | - |
| Intel | Nuc10I7Fn | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.Vendor Advisory
FAQ
What is CVE-2021-33090?
CVE-2021-33090 is a vulnerability with a CVSS score of 7.8 (HIGH). Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to p...
How severe is CVE-2021-33090?
CVE-2021-33090 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33090?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Nuc Hdmi Firmware Update Tool, Intel Nuc10I3Fn, Intel Nuc10I5Fn, Intel Nuc10I7Fn.