CVE-2021-0102

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	Intel Unite(R) Client for Windows	before version 4.2.25031

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00506.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00506.htmlVendor Advisory

Timeline

Published: Jun 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01036.7Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escal CVE-2021-01047.8Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 CVE-2021-01057.3Insecure inherited permissions in some Intel(R) ProSet/Wireless WiFi drivers may allow an authenticated user to potentially enable informati CVE-2021-01067.8Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3 CVE-2021-01076.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privileg CVE-2021-01087.3Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially en CVE-2021-01097.8Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to poten CVE-2021-01105.5Improper access control in some Intel(R) Thunderbolt(TM) Windows DCH Drivers before version 1.41.1054.0 may allow unauthenticated user to po CVE-2021-01116.7NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of pri CVE-2021-01127.3Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enabl CVE-2021-01136.5Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauth CVE-2021-01146.7Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privi