PT-2021-20044 · Intel · Intel(R) Nuc M15 Laptop Kit Audio Driver Pack

Published 2021-11-17 · Updated 2021-11-22 · CVE-2021-33091

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) NUC M15 Laptop Kit audio driver pack versions prior to 1.3

Description The issue is related to insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit audio driver pack. This may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 1.3, update to version 1.3 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2021-33091

Affected Products

Intel(R) Nuc M15 Laptop Kit Audio Driver Pack

References · 4

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00569.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33091 · Security Note
• https://t.me/cibsecurity/32568 · Telegram Post