CVE-2021-0091

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-00924.4Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service v CVE-2021-00934.4Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of ser CVE-2021-00947.8Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable CVE-2021-00954.4Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service v CVE-2021-00967.8Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before ver CVE-2021-00976.5Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic CVE-2021-00987.8Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially ena CVE-2021-00997.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an e CVE-2021-01007.8Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an au CVE-2021-01018.8Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic CVE-2021-01027.8Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentia CVE-2021-01036.7Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escal