CVEvulnerability
CVE-2021-0104
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.4 MEDIUM — AV:L/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-427
Description
Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel rapid storage technology (< 17.9.1.1009.5)
• intel rapid storage technology (>= 18.0.0.640 < 18.0.3.1148.4)
• intel rapid storage technology (>= 18.1.0.24 < 18.1.0.1028.2)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00545.html Patch, Vendor Advisory