K08173228 : Multiple Intel CPU vulnerabilities

Security Advisory Description

• CVE-2021-0091

Improper access control in the firmware for some Intel® Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.

• CVE-2021-0092

Improper access control in the firmware for some Intel® Processors may allow a privileged user to potentially enable a denial of service via local access.

• CVE-2021-0093

Incorrect default permissions in the firmware for some Intel® Processors may allow a privileged user to potentially enable a denial of service via local access.

• CVE-2021-0099

Insufficient control flow management in the firmware for some Intel® Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

• CVE-2021-0103

Insufficient control flow management in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0107

Unchecked return value in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2021-0111

NULL pointer dereference in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0114

Unchecked return value in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0115

Buffer overflow in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2021-0116

Out-of-bounds write in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0117

Pointer issues in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0118

Out-of-bounds read in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

• CVE-2021-0119

Improper initialization in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

• CVE-2021-0124

Improper access control in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

• CVE-2021-0125

Improper initialization in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

• CVE-2021-0156

Improper input validation in the firmware for some Intel® Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

Impact

An attacker may be able to exploit the Intel processor firmware to gain elevated access to resources. The following platforms are vulnerable:

• VELOS CX410
• VELOS BX110 Blade

For more information, refer to K86001294: F5OS hardware/software support matrix.