VULNERABILITY INTELLIGENCE
CVE-2021-33090
CVSS score7.8 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-11-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NUC10i5FN, NUC10i7FN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness classification
- nvd@nist.gov: CWE-276
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory