CVE-2021-0104

EUVD-2021-2723
Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
intelrapid_storage_technology
𝑥
< 17.9.1.1009.5
intelrapid_storage_technology
18.0.0.640 ≤
𝑥
< 18.0.3.1148.4
intelrapid_storage_technology
18.1.0.24 ≤
𝑥
< 18.1.0.1028.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html