Lapbc510 Firmware
CVE-2021-0056
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
AnalysisAI
Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified as Incorrect Permission Assignment (CWE-732), which allows attackers to access resources due to misconfigured permissions. Insecure inherited permissions for the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Lapbc510 Firmware, Intel Lapbc710 Firmware. Version information: version 1.1.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Review and restrict file/resource permissions, apply principle of least privilege.
More in Lapbc510 Firmware
View allImproper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged
Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileg
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u
Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may all
Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged u
Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio
Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala
Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged
Same technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today