# CVE-2021-0090: Intel Driver & Support Assistant (DSA) Elevation of Privilege (EoP)

DevFeed: [CVE-2021-0090: Intel Driver & Support Assistant (DSA) Elevation of Privilege (EoP)](<https://devfeed.tech/articles/cve-2021-0090-intel-driver-support-assistant-dsa-elevation-of-privilege-eop-20502.md>)

Original publisher: [Read original article](<https://bohops.com/2021/08/07/cve-2021-0090-intel-driver-support-assistant-dsa-elevation-of-privilege-eop/>)

Author: bohops

Published: 2021-08-07T16:30:24Z

Content type: article

Language: en

Sources: [Bohops](<https://devfeed.tech/sources/bohops.md>)

Topics: [intel](<https://devfeed.tech/topics/intel.md>), [Utility Software](<https://devfeed.tech/topics/utility.md>), [bug](<https://devfeed.tech/topics/bug.md>), [Software](<https://devfeed.tech/topics/software.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Web](<https://devfeed.tech/topics/web.md>), [web browser](<https://devfeed.tech/topics/web-browser.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [bug](<https://devfeed.tech/tags/bug.md>), [configuration](<https://devfeed.tech/tags/configuration.md>), [cve](<https://devfeed.tech/tags/cve.md>), [driver](<https://devfeed.tech/tags/driver.md>), [intel](<https://devfeed.tech/tags/intel.md>), [local](<https://devfeed.tech/tags/local.md>), [mount](<https://devfeed.tech/tags/mount.md>), [payload](<https://devfeed.tech/tags/payload.md>), [software](<https://devfeed.tech/tags/software.md>), [technical](<https://devfeed.tech/tags/technical.md>), [uncategorized](<https://devfeed.tech/tags/uncategorized.md>), [web](<https://devfeed.tech/tags/web.md>), [windows](<https://devfeed.tech/tags/windows.md>)

## AI overview

This technical advisory examines a local privilege-escalation vulnerability in Intel Driver & Support Assistant version 20.8.30.6 and likely earlier versions. It describes how an unprivileged user can alter download and data-folder settings and potentially use a reparse point to cause a privileged file-copy operation and execute unintended code.

## Source excerpt

TL;DR Intel Driver & Support Assistant (DSA) is a driver and software update utility for Intel components. DSA version 20.8.30.6 (and likely prior) is vulnerable to a local privilege escalation reparse point bug. An unprivileged user has nominal control over configuration settings within the web-based interface. This includes the ability to configure the folder location [...]