Intel BIOS firmware 输入验证错误漏洞

🗓️ 11 May 2022 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 6 Views

There is an input validation error in Intel BIOS firmware that could allow local attackers to elevate privileges.

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	The vulnerability of the trusted loading module in Intel microprogrammed system BIOS allows a hacker to enhance their privileges.	29 Jun 202200:00	–	bdu_fstec
CVE	CVE-2021-0159	12 May 202216:36	–	cve
Cvelist	CVE-2021-0159	12 May 202216:36	–	cvelist
EUVD	EUVD-2021-2778	3 Oct 202520:07	–	euvd
F5 Networks	K13070025: Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122	21 Feb 202319:55	–	f5
HPE Security Bulletins	HPESBHF04286 rev.4 - Certain HPE ProLiant BL/DL/ML/XL/MicroServer and Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04292 rev.3 - Certain HPE Synergy Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04296 rev.2 - Certain HPE ProLiant DX Servers Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	10 May 202200:00	–	hpe
HPE Security Bulletins	HPESBHF04303 rev.1 - Certain HPE Moonshot/Edgeline Servers using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	27 Jun 202200:00	–	hpe
HPE Security Bulletins	HPESBNS04337 rev.1 - Certain HPE NonStop Products Using Certain Intel Processor BIOS, INTEL-SA-00601, 2022.1 IPU – Intel BIOS Advisory, Multiple Local Vulnerabilities	28 Sep 202200:00	–	hpe

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
security	www.security.netapp.com/advisory/ntap-20220818-0003/
cxsecurity	www.cxsecurity.com/cveshow/CVE-2021-0159/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022051714
vigilance	www.vigilance.fr/vulnerability/HPE-ProLiant-privilege-escalation-via-Intel-CPU-38317
auscert	www.auscert.org.au/bulletins/ESB-2022.2324

23 May 2026 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.2

CVSS 3.17.8

EPSS0.00259

SSVC

Intel firmware input validation privilege escalation local access security vulnerability