The vulnerability of the BIOS microprogramming system of Intel processors allows a hacker to enhance their privileges and execute arbitrary code.

🗓️ 22 Jul 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

A flaw in Intel processor bios microprogramming enables privilege escalation and code execution.

Reporter	Title	Published	Views	Family All 21
CNNVD	Intel BIOS firmware缓冲区错误漏洞	11 May 202200:00	–	cnnvd
CVE	CVE-2021-0189	12 May 202216:36	–	cve
Cvelist	CVE-2021-0189	12 May 202216:36	–	cvelist
EUVD	EUVD-2021-2808	3 Oct 202520:07	–	euvd
F5 Networks	K13070025: Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122	21 Feb 202319:55	–	f5
HPE Security Bulletins	HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04292 rev.3 - Certain HPE Synergy Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04296 rev.2 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04303 rev.1 - Certain HPE Moonshot/Edgeline Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	27 Jun 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04314 rev.4 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, SGI UV 300 Servers and SGI UV 3000 Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	7 Jun 202200:00	–	hpe

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-0189
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
web	www.web.nvd.nist.gov/view/vuln/detail

22 Jul 2022 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 26.8

CVSS 37.8

EPSS0.00268

intel processors bios microprogramming privilege escalation arbitrary code execution memory boundary violation