K13070025 : Intel BIOS vulnerabiilties CVE-2021-0159, CVE-2021-0188, CVE-2021-0189, CVE-2021-33103, and CVE-2021-33122

Security Advisory Description

• CVE-2021-0159

Improper input validation in the BIOS authenticated code module for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

• CVE-2021-0188

Return of pointer value outside of expected range in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

• CVE-2021-0189

Use of out-of-range pointer offset in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

• CVE-2021-33103

Unintended intermediary in the BIOS authenticated code module for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

• CVE-2021-33122

Insufficient control flow management in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Impact

There is no impact; F5 products are not affected by these vulnerabilities.