Read the docs
TI-2021-00066 Aliases CVE-2021-0112GHSA-g748-jrj6-5689

Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031…

Priority LOW 32CWE-428Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-428.

Summary

Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.

Why it matters now

EPSS 0.00255 17th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Intel Unite(R) Client for Windowsbefore version 4.2.25031—No fix listedCNA
  • Intel Unite(R) Client for Windows Vendor— Affected before version 4.2.25031 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:intel:unite:*:*:*:*:*:windows:*:*before 4.2.25031VulnerableIntel
  • cpe:2.3:a:intel:unite:*:*:*:*:*:windows:*:* Versions before 4.2.25031 Vulnerable ·Intel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-0112
  2. 2026-10-03 Alias added: GHSA-g748-jrj6-5689

References

Advisory 1

  • TI-2019-00150 A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a… CVSS 3.0CRITICAL 9.8
  • TI-2019-00086 Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow… CVSS 3.0CRITICAL 9.8
  • TI-2017-03715 Information disclosure in Intel Unite App CVSS 3.0CRITICAL 9.1
  • TI-2019-00115 Data Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an… CVSS 3.1HIGH 7.5
  • TI-2023-11045 Improper access control in Intel Unite Hub software installer for Windows CVSS 3.1HIGH 7.8
  • TI-2022-14959 Incorrect default permissions in software installer for Intel Unite Client software for… CVSS 3.1HIGH 7.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences