CVE-2021-0104

Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
intelCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 29%
VendorProductVersion
intelrapid_storage_technology
𝑥
< 17.9.1.1009.5
intelrapid_storage_technology
18.0.0.640 ≤
𝑥
< 18.0.3.1148.4
intelrapid_storage_technology
18.1.0.24 ≤
𝑥
< 18.1.0.1028.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html