Lucene search

[email protected]CVE-2021-0157

HistoryNov 17, 2021 - 8:15 p.m.

CVE-2021-0157

2021-11-1720:15:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

intel

processors

bios firmware

privilege escalation

cve-2021-0157

nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Insufficient control flow management in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:celeron_n2840intel celeron n2840eq-
intel:celeron_n4100intel celeron n4100eq-
intel:celeron_n4000intel celeron n4000eq-
intel:celeron_n3350intel celeron n3350eq-
intel:celeron_n3450intel celeron n3450eq-
intel:celeron_n3000intel celeron n3000eq-
intel:celeron_n2940intel celeron n2940eq-
intel:celeron_n2930intel celeron n2930eq-
intel:celeron_n2830intel celeron n2830eq-
intel:pentium_silver_j5005intel pentium silver j5005eq-

CPE	Name	Operator	Version
intel:celeron_n2840	intel celeron n2840	eq	-
intel:celeron_n4100	intel celeron n4100	eq	-
intel:celeron_n4000	intel celeron n4000	eq	-
intel:celeron_n3350	intel celeron n3350	eq	-
intel:celeron_n3450	intel celeron n3450	eq	-
intel:celeron_n3000	intel celeron n3000	eq	-
intel:celeron_n2940	intel celeron n2940	eq	-
intel:celeron_n2930	intel celeron n2930	eq	-
intel:celeron_n2830	intel celeron n2830	eq	-
intel:pentium_silver_j5005	intel pentium silver j5005	eq	-

Rows per page:

1-10 of 4841

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2021-0157

prion1 redhatcve1 intel1 hp1 f51