Lucene search

[email protected]CVE-2021-0188

HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-0188

2022-05-1217:15:08

CWE-119

[email protected]

web.nvd.nist.gov

cve-2021-0188

bios firmware

intel processors

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Return of pointer value outside of expected range in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected configurations

NVD

Node

intelxeon_e3-1558l_v5Match-

AND

intelxeon_e3-1558l_v5_firmwareMatch-

Node

intelxeon_e3-1565l_v5Match-

AND

intelxeon_e3-1565l_v5_firmwareMatch-

Node

intelxeon_e3-1578l_v5Match-

AND

intelxeon_e3-1578l_v5_firmwareMatch-

Node

intelxeon_e3-1585_v5Match-

AND

intelxeon_e3-1585_v5_firmwareMatch-

Node

intelxeon_e3-1585l_v5Match-

AND

intelxeon_e3-1585l_v5_firmwareMatch-

Node

intelxeon_e3-1515m_v5Match-

AND

intelxeon_e3-1515m_v5_firmwareMatch-

Node

intelxeon_e3-1545m_v5Match-

AND

intelxeon_e3-1545m_v5_firmwareMatch-

Node

intelxeon_e3-1575m_v5Match-

AND

intelxeon_e3-1575m_v5_firmwareMatch-

Node

intelxeon_e3-1220_v5_firmwareMatch-

AND

intelxeon_e3-1220_v5Match-

Node

intelxeon_e3-1225_v5_firmwareMatch-

AND

intelxeon_e3-1225_v5Match-

Node

intelxeon_e3-1230_v5_firmwareMatch-

AND

intelxeon_e3-1230_v5Match-

Node

intelxeon_e3-1235l_v5_firmwareMatch-

AND

intelxeon_e3-1235l_v5Match-

Node

intelxeon_e3-1240_v5_firmwareMatch-

AND

intelxeon_e3-1240_v5Match-

Node

intelxeon_e3-1240l_v5_firmwareMatch-

AND

intelxeon_e3-1240l_v5Match-

Node

intelxeon_e3-1245_v5_firmwareMatch-

AND

intelxeon_e3-1245_v5Match-

Node

intelxeon_e3-1260l_v5_firmwareMatch-

AND

intelxeon_e3-1260l_v5Match-

Node

intelxeon_e3-1268l_v5_firmwareMatch-

AND

intelxeon_e3-1268l_v5Match-

Node

intelxeon_e3-1270_v5_firmwareMatch-

AND

intelxeon_e3-1270_v5Match-

Node

intelxeon_e3-1275_v5_firmwareMatch-

AND

intelxeon_e3-1275_v5Match-

Node

intelxeon_e3-1280_v5_firmwareMatch-

AND

intelxeon_e3-1280_v5Match-

Node

intelxeon_e3-1505l_v5_firmwareMatch-

AND

intelxeon_e3-1505l_v5Match-

Node

intelxeon_e3-1505m_v5_firmwareMatch-

AND

intelxeon_e3-1505m_v5Match-

Node

intelxeon_e3-1535m_v5_firmwareMatch-

AND

intelxeon_e3-1535m_v5Match-

Node

intelxeon_e3-1285_v6_firmwareMatch-

AND

intelxeon_e3-1285_v6Match-

Node

intelxeon_e3-1501l_v6_firmwareMatch-

AND

intelxeon_e3-1501l_v6Match-

Node

intelxeon_e3-1501m_v6_firmwareMatch-

AND

intelxeon_e3-1501m_v6Match-

Node

intelxeon_e3-1220_v6_firmwareMatch-

AND

intelxeon_e3-1220_v6Match-

Node

intelxeon_e3-1225_v6_firmwareMatch-

AND

intelxeon_e3-1225_v6Match-

Node

intelxeon_e3-1230_v6_firmwareMatch-

AND

intelxeon_e3-1230_v6Match-

Node

intelxeon_e3-1240_v6_firmwareMatch-

AND

intelxeon_e3-1240_v6Match-

Node

intelxeon_e3-1245_v6_firmwareMatch-

AND

intelxeon_e3-1245_v6Match-

Node

intelxeon_e3-1270_v6_firmwareMatch-

AND

intelxeon_e3-1270_v6Match-

Node

intelxeon_e3-1275_v6_firmwareMatch-

AND

intelxeon_e3-1275_v6Match-

Node

intelxeon_e3-1280_v6_firmwareMatch-

AND

intelxeon_e3-1280_v6Match-

Node

intelxeon_e3-1505l_v6_firmwareMatch-

AND

intelxeon_e3-1505l_v6Match-

Node

intelxeon_e3-1505m_v6_firmwareMatch-

AND

intelxeon_e3-1505m_v6Match-

Node

intelxeon_e3-1535m_v6_firmwareMatch-

AND

intelxeon_e3-1535m_v6Match-

CPENameOperatorVersion
intel:xeon_e3-1558l_v5_firmwareintel xeon e3-1558l v5 firmwareeq-

CPE	Name	Operator	Version
intel:xeon_e3-1558l_v5_firmware	intel xeon e3-1558l v5 firmware	eq	-

CNA Affected

[
  {
    "product": "Intel(R) Processors",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

References

security.netapp.com/advisory/ntap-20220818-0003/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Social References

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVE-2021-0188

cvelist1 nvd1 prion1 f51 intel1 hp1