Lucene search

[email protected]CVE-2021-0158

HistoryNov 17, 2021 - 8:15 p.m.

CVE-2021-0158

2021-11-1720:15:00

CWE-20

[email protected]

web.nvd.nist.gov

intel

processors

bios

firmware

cve-2021-0158

nvd

input validation

escalation of privilege

local access

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Improper input validation in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CPENameOperatorVersion
intel:celeron_n2840intel celeron n2840eq-
intel:celeron_n4100intel celeron n4100eq-
intel:celeron_n4000intel celeron n4000eq-
intel:celeron_n3350intel celeron n3350eq-
intel:celeron_n3450intel celeron n3450eq-
intel:celeron_n3000intel celeron n3000eq-
intel:celeron_n2940intel celeron n2940eq-
intel:celeron_n2930intel celeron n2930eq-
intel:celeron_n2830intel celeron n2830eq-
intel:pentium_silver_j5005intel pentium silver j5005eq-

CPE	Name	Operator	Version
intel:celeron_n2840	intel celeron n2840	eq	-
intel:celeron_n4100	intel celeron n4100	eq	-
intel:celeron_n4000	intel celeron n4000	eq	-
intel:celeron_n3350	intel celeron n3350	eq	-
intel:celeron_n3450	intel celeron n3450	eq	-
intel:celeron_n3000	intel celeron n3000	eq	-
intel:celeron_n2940	intel celeron n2940	eq	-
intel:celeron_n2930	intel celeron n2930	eq	-
intel:celeron_n2830	intel celeron n2830	eq	-
intel:pentium_silver_j5005	intel pentium silver j5005	eq	-

Rows per page:

1-10 of 4841

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00562.html

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

11.8%

JSON

Related for CVE-2021-0158

prion1 redhatcve1 intel1 f51 hp1