Intel BIOS firmware缓冲区错误漏洞

🗓️ 11 May 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 6 Views

Intel firmware vulnerability allows privilege elevation via out-of-range pointer offsets.

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the BIOS microprogramming system of Intel processors allows a hacker to enhance their privileges and execute arbitrary code.	22 Jul 202200:00	–	bdu_fstec
CVE	CVE-2021-0189	12 May 202216:36	–	cve
Cvelist	CVE-2021-0189	12 May 202216:36	–	cvelist
EUVD	EUVD-2021-2808	3 Oct 202520:07	–	euvd
F5 Networks	K13070025: Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122	21 Feb 202319:55	–	f5
HPE Security Bulletins	HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04292 rev.3 - Certain HPE Synergy Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04296 rev.2 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04303 rev.1 - Certain HPE Moonshot/Edgeline Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	27 Jun 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04314 rev.4 - HPE Superdome Flex, Superdome Flex 280, Integrity MC990 X, SGI UV 300 Servers and SGI UV 3000 Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	7 Jun 202200:00	–	hpe

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
security	www.security.netapp.com/advisory/ntap-20220818-0003/
cxsecurity	www.cxsecurity.com/cveshow/CVE-2021-0189/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022051714
vigilance	www.vigilance.fr/vulnerability/HPE-ProLiant-privilege-escalation-via-Intel-CPU-38317
auscert	www.auscert.org.au/bulletins/ESB-2022.2324

23 May 2026 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.2

CVSS 3.17.8

EPSS0.00268

SSVC

Intel firmware pointer offsets privilege elevation security vulnerability