VDB

CVE-2021-33088

CVE-2021-33088 PUBLISHED

Reported by intel · Published November 17, 2021

Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access.

Fixed versions

Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.

PackageEcosystemFixed in
nuc_m15_laptop_kit_integrated_sensor_hub_driver_packintel5.4.1.4449

Affected products

VendorProductVersions
n/aIntel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver packbefore version 5.4.1.4449
n/aIntel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack0

Timeline

  • Nov 10, 2021 CVE Published
  • Nov 18, 2021 EPSS Score (30 in total, the first dated here)
  • Nov 21, 2024 CVE Updated
  • Jun 1, 2026 Security Advisory
  • Aug 1, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2021-33088
vulnetix vdb fixes CVE-2021-33088

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2021-33088/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

  • x_refsource_MISC
Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›