7.8

CVE-2021-0065

Incorrect default permissions in the Intel(R) PROSet/Wireless WiFi software installer for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Ax210 Firmware Version < 22.40
   Intel ≫ Ax210 Version-
Intel ≫ Ax201 Firmware Version < 22.40
   Intel ≫ Ax201 Version-
Intel ≫ Ax200 Firmware Version < 22.40
   Intel ≫ Ax200 Version-
Intel ≫ Ac 9560 Firmware Version < 22.40
   Intel ≫ Ac 9560 Version-
Intel ≫ Ac 9462 Firmware Version < 22.40
   Intel ≫ Ac 9462 Version-
Intel ≫ Ac 9461 Firmware Version < 22.40
   Intel ≫ Ac 9461 Version-
Intel ≫ 9260 Firmware Version-
   Intel ≫ Ac 9260 Version-
Intel ≫ Ac 9260 Firmware Version < 22.40
   Intel ≫ Ac 9260 Version-
Intel ≫ Ac 8265 Firmware Version < 22.40
   Intel ≫ Ac 8265 Version-
Intel ≫ Ac 8260 Firmware Version < 22.40
   Intel ≫ Ac 8260 Version-
Intel ≫ Ac 3168 Firmware Version < 22.40
   Intel ≫ Ac 3168 Version-
Intel ≫ 7265 Firmware Version < 22.40
   Intel ≫ 7265 Version-
Intel ≫ Ac 3165 Firmware Version < 22.40
   Intel ≫ Ac 3165 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.097
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.