Permissions, Privileges, and Access Controls in Intel products - CVE-2021-0055

Vulnerability identifier: #VU54201

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-0055

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to application does not properly impose security restrictions, which leads to security restrictions bypass and privilege escalation.

Intel NUC 9 Extreme Laptop Kit - LAPQC71A
Intel NUC 9 Extreme Laptop Kit - LAPQC71B
Intel NUC 9 Extreme Laptop Kit - LAPQC71C
Intel NUC 9 Extreme Laptop Kit - LAPQC71D

Install updates from vendor's website.

Intel NUC 9 Extreme Laptop Kit - LAPQC71A - update to 10.45
Intel NUC 9 Extreme Laptop Kit - LAPQC71B - update to 10.45
Intel NUC 9 Extreme Laptop Kit - LAPQC71C - update to 10.45
Intel NUC 9 Extreme Laptop Kit - LAPQC71D - update to 10.45

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00505.html

• Privilege escalation in Intel NUC 9 Extreme Laptop Kit LAN Driver