CVE-2021-0096

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN before version 1.78.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN, NUC7i7DN	before version 1.78.1.1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00568.htmlPatch, Vendor Advisory

Timeline

Published: Nov 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-00976.5Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic CVE-2021-00987.8Improper access control in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially ena CVE-2021-00997.8Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an e CVE-2021-01007.8Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an au CVE-2021-01018.8Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthentic CVE-2021-01027.8Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentia CVE-2021-01036.7Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escal CVE-2021-01047.8Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 CVE-2021-01057.3Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informati CVE-2021-01067.8Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3 CVE-2021-01076.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileg CVE-2021-01087.3Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially en