#VU54151 Improper access control in Intel products - CVE-2021-0067

Vulnerability identifier: #VU54151

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2021-0067

CWE-ID: CWE-284

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel NUC M15 Laptop Kit - LAPBC510
Intel NUC M15 Laptop Kit - LAPBC710
Intel NUC 11 Compute Element CM11EBC4W
Intel NUC 11 Compute Element CM11EBi38W
Intel NUC 11 Compute Element CM11EBi58W
Intel NUC 11 Compute Element CM11EBi716W
Intel NUC 11 Performance kit - NUC11PAHi3
Intel NUC 11 Performance kit - NUC11PAHi5
Intel NUC 11 Performance kit - NUC11PAHi7
Intel NUC 11 Performance kit - NUC11PAKi3
Intel NUC 11 Performance kit - NUC11PAKi5
Intel NUC 11 Performance kit - NUC11PAKi7
Intel NUC 11 Performance Mini PC - NUC11PAQi50WA
Intel NUC 11 Performance Mini PC - NUC11PAQi70QA
Intel NUC 11 Pro Board NUC11TNBi3
Intel NUC 11 Pro Board NUC11TNBi5
Intel NUC 11 Pro Board NUC11TNBi7
Intel NUC 11 Pro Kit NUC11TNHi3
Intel NUC 11 Pro Kit NUC11TNHi30L
Intel NUC 11 Pro Kit NUC11TNHi30P
Intel NUC 11 Pro Kit NUC11TNHi5
Intel NUC 11 Pro Kit NUC11TNHi50L
Intel NUC 11 Pro Kit NUC11TNHi50W
Intel NUC 11 Pro Kit NUC11TNHi7
Intel NUC 11 Pro Kit NUC11TNHi70L
Intel NUC 11 Pro Kit NUC11TNHi70Q
Intel NUC 11 Pro Kit NUC11TNKi3
Intel NUC 11 Pro Kit NUC11TNKi5
Intel NUC 11 Pro Kit NUC11TNKi7
Intel NUC 11 Enthusiast Kit - NUC11PHKi7C
Intel NUC 11 Enthusiast Mini PC - NUC11PHKi7CAA
Intel NUC 10 Performance kit - NUC10i3FNH
Intel NUC 10 Performance kit - NUC10i3FNHF
Intel NUC 10 Performance kit - NUC10i3FNK
Intel NUC 10 Performance kit - NUC10i5FNH
Intel NUC 10 Performance kit - NUC10i5FNHF
Intel NUC 10 Performance kit - NUC10i5FNHJ
Intel NUC 10 Performance kit - NUC10i5FNK
Intel NUC 10 Performance kit - NUC10i5FNKP
Intel NUC 10 Performance kit - NUC10i7FNH
Intel NUC 10 Performance kit - NUC10i7FNHC
Intel NUC 10 Performance kit - NUC10i7FNK
Intel NUC 10 Performance kit - NUC10i7FNKP
Intel NUC 10 Performance Mini PC - NUC10i3FNHFA
Intel NUC 10 Performance Mini PC - NUC10i3FNHJA
Intel NUC 10 Performance Mini PC - NUC10i5FNHCA
Intel NUC 10 Performance Mini PC - NUC10i5FNHJA
Intel NUC 10 Performance Mini PC - NUC10i5FNKPA
Intel NUC 10 Performance Mini PC - NUC10i7FNHAA
Intel NUC 10 Performance Mini PC - NUC10i7FNHJA
Intel NUC 10 Performance Mini PC - NUC10i7FNKPA
Intel NUC 9 Pro Compute Element - NUC9V7QNB
Intel NUC 9 Pro Compute Element - NUC9VXQNB
Intel NUC 9 Pro Kit - NUC9V7QNX
Intel NUC 9 Pro Kit - NUC9VXQNX
Intel NUC 8 Business
a Mini PC with Windows 10 - NUC8i7HNKQC
Intel NUC 8 Enthusiast
a Mini PC with Windows 10 - NUC8i7HVKVA
a Mini PC with Windows 10 - NUC8i7HVKVAW
Intel NUC Kit NUC8i7HNK
Intel NUC Kit NUC8i7HVK
Intel NUC 8 Rugged Kit NUC8CCHKR
Intel NUC Board NUC8CCHB
Intel NUC 8 Compute Element CM8CCB
Intel NUC 8 Compute Element CM8i3CB
Intel NUC 8 Compute Element CM8i5CB
Intel NUC 8 Compute Element CM8i7CB
Intel NUC 8 Compute Element CM8PCB
Intel NUC 8 Pro Board NUC8i3PNB
Intel NUC 8 Pro Kit NUC8i3PNH
Intel NUC 8 Pro Kit NUC8i3PNK
Intel NUC 8 Mainstream-G kit NUC8i5INH
Intel NUC 8 Mainstream-G kit NUC8i7INH
Intel NUC 8 Mainstream-G mini PC NUC8i5INH
Intel NUC 8 Mainstream-G mini PC NUC8i7INH
Intel NUC 7 Essential
a Mini PC with Windows 10 - NUC7CJYSAL
Intel NUC Kit NUC7CJYH
Intel NUC Kit NUC7PJYH

Software vendor:
Intel

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in system firmware. A local administrator can bypass implemented security restrictions and gain elevated privileges on the system.

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00511.html