Lucene search

[email protected]CVE-2021-33103

HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-33103

2022-05-1217:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2021-33103

bios

intel processors

privilege escalation

nvd

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.9%

JSON

Unintended intermediary in the BIOS authenticated code module for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

CPENameOperatorVersion
intel:xeon_e-2386g_firmwareintel xeon e-2386g firmwareeq-
intel:xeon_e-2374g_firmwareintel xeon e-2374g firmwareeq-
intel:xeon_e-2314_firmwareintel xeon e-2314 firmwareeq-
intel:xeon_e-2334_firmwareintel xeon e-2334 firmwareeq-
intel:xeon_e-2356g_firmwareintel xeon e-2356g firmwareeq-
intel:xeon_e-2378_firmwareintel xeon e-2378 firmwareeq-
intel:xeon_e-2324g_firmwareintel xeon e-2324g firmwareeq-
intel:xeon_e-2378g_firmwareintel xeon e-2378g firmwareeq-
intel:xeon_e-2336_firmwareintel xeon e-2336 firmwareeq-
intel:xeon_e-2388g_firmwareintel xeon e-2388g firmwareeq-

CPE	Name	Operator	Version
intel:xeon_e-2386g_firmware	intel xeon e-2386g firmware	eq	-
intel:xeon_e-2374g_firmware	intel xeon e-2374g firmware	eq	-
intel:xeon_e-2314_firmware	intel xeon e-2314 firmware	eq	-
intel:xeon_e-2334_firmware	intel xeon e-2334 firmware	eq	-
intel:xeon_e-2356g_firmware	intel xeon e-2356g firmware	eq	-
intel:xeon_e-2378_firmware	intel xeon e-2378 firmware	eq	-
intel:xeon_e-2324g_firmware	intel xeon e-2324g firmware	eq	-
intel:xeon_e-2378g_firmware	intel xeon e-2378g firmware	eq	-
intel:xeon_e-2336_firmware	intel xeon e-2336 firmware	eq	-
intel:xeon_e-2388g_firmware	intel xeon e-2388g firmware	eq	-

Rows per page:

1-10 of 1931

References

security.netapp.com/advisory/ntap-20220818-0003/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Social References

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.6 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

11.9%

JSON

Related for CVE-2021-33103

prion1 f51 intel1 hp1