High severity · published Nov 17, 2021
CVE-2021-33071
Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of…
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OR
Oneapi Rendering Toolkit · Intel
before 2021.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33071
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33071
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00564.html
More from Oneapi Rendering Toolkit
7.8
CVE-2023-29242
Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access
7.8
CVE-2023-22355
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable…
7.3
CVE-2023-28823
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable…
6.7
CVE-2023-27391
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of…