CVE-2021-0160

Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:intel:avermedia_capture_card:*:*:*:*:*:*:*:*
OR cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fbav:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1aba:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abc:-:*:*:*:*:*:*:*

History

20 Aug 2021, 16:55

Type Values Removed Values Added
CPE cpe:2.3:a:intel:avermedia_capture_card:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abc:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fbav:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1aba:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fb:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : 4.6
v3 : 7.8
CWE CWE-427
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html - Patch, Vendor Advisory

11 Aug 2021, 13:15

Type Values Removed Values Added
New CVE

Information

Published : 2021-08-11 13:15

Updated : 2024-02-04 21:47


NVD link : CVE-2021-0160

Mitre link : CVE-2021-0160

CVE.ORG link : CVE-2021-0160


JSON object : View

Products Affected

intel

  • nuc_pro_chassis_element_cmcr1abc
  • nuc_pro_chassis_element_cmcm2fbav
  • nuc_pro_chassis_element_cmcr1aba
  • nuc_pro_chassis_element_cmcm2fb
  • nuc_pro_chassis_element_cmcr1abb
  • avermedia_capture_card
CWE
CWE-427

Uncontrolled Search Path Element