CVE-2021-33157

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-33157
Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.

7.2 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.8

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
Configurations

No configuration.

History

16 May 2024, 21:15

Type Values Removed Values Added
CWE CWE-691
References
  • () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html -
Summary (en) Rejected reason: This is unused. (en) Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.2

29 Feb 2024, 01:31

Type Values Removed Values Added
Summary (en) (en) Rejected reason: This is unused.

23 Feb 2024, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-02-23 21:15

Updated : 2024-05-17 18:36

NVD link : CVE-2021-33157

Mitre link : CVE-2021-33157

CVE.ORG link : CVE-2021-33157

JSON object : View

Products Affected

No product.

CWE
CWE-691

Insufficient Control Flow Management