CVE-2021-0160

{"containers": {"cna": {"affected": [{"product": "Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers", "vendor": "n/a", "versions": [{"status": "affected", "version": "before version 3.0.64.143"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access."}], "problemTypes": [{"descriptions": [{"description": "escalation of privilege", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2021-08-11T12:48:27.000Z", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@intel.com", "ID": "CVE-2021-0160", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers", "version": {"version_data": [{"version_value": "before version 3.0.64.143"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "escalation of privilege"}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html", "refsource": "MISC", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T15:32:09.453Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html"}]}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2021-0160", "datePublished": "2021-08-11T12:48:27.000Z", "dateReserved": "2020-10-22T00:00:00.000Z", "dateUpdated": "2024-08-03T15:32:09.453Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers", "vendor": "n/a", "versions": [{"status": "affected", "version": "before version 3.0.64.143"}]}], "source": "secure@intel.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:avermedia_capture_card:*:*:*:*:*:*:*:*", "matchCriteriaId": "144FB9CA-4813-460D-BC0B-5CD1678DF704", "versionEndExcluding": "3.0.64.143", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fb:-:*:*:*:*:*:*:*", "matchCriteriaId": "AD3307DC-18D2-4723-A126-54C5FEA3095F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_pro_chassis_element_cmcm2fbav:-:*:*:*:*:*:*:*", "matchCriteriaId": "69F92FD3-C773-49B9-86E7-BFBD0C2AC2D7", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1aba:-:*:*:*:*:*:*:*", "matchCriteriaId": "FBF996D7-786F-4578-895C-565B6B7A73F3", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abb:-:*:*:*:*:*:*:*", "matchCriteriaId": "E132898D-332D-4AEB-A104-58A283A4B51E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_pro_chassis_element_cmcr1abc:-:*:*:*:*:*:*:*", "matchCriteriaId": "366FF89C-04DE-459F-AC21-2348D800BCE5", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "Una ruta de b\u00fasqueda no controlada en algunos controladores de la tarjeta de captura Intel(R) NUC Pro Chassis Element AverMedia versiones anteriores a 3.0.64.143, puede permitir a un usuario autenticado habilitar potencialmente la escalada de privilegios por medio del acceso local"}], "id": "CVE-2021-0160", "lastModified": "2026-06-17T03:29:22.073", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 4.6, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2021-08-11T13:15:15.990", "references": [{"source": "secure@intel.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00543.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}