PT-2021-5033 · Intel +5 · Intel Processors +5

🗓️ 11 Sep 2021 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 15 Views

Unauthenticated users may escalate privileges via runtime debug logic in Intel processors; BIOS/UEFI protection is weak; no fix.

Reporter	Title	Published	Views	Family All 3996
IBM Security Bulletins	Security Bulletin: IBM has released a Unified Extensible Firmware Interface (UEFI) fix in response to an Intel escalation of information disclosure vulnerability	14 Jul 202016:02	–	ibm
IBM Security Bulletins	Security Bulletin: This Power Hardware Management Console (HMC) update is being released to address Common Vulnerabilities and Exposures issue numbers CVE-2017-5715, CVE-2017-5753 and CVE-2017-5754 (known as Spectre and Meltdown).	23 Sep 202101:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Intel Microarchitectural Data Sampling (MDS) Vulnerabilites (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)	6 Nov 201911:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak System is vulnerable to Intel Microarchitectural Data Sampling (MDS) Vulnerabilites	6 May 202012:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes multiple components with known vulnerabilities	13 Feb 202313:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Intel Microarchitectural Data Sampling (MDS) Side Channel vulnerabilities.	7 Dec 202322:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202022:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM Appliances could be vulnerable to multiple Intel CVEs	5 Dec 202219:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Technical Suppport Appliance - possible security flaws or denial of service	21 Nov 202421:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Intel Processors affect IBM Cloud Pak System	31 Mar 202315:06	–	ibm

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
ubuntu	www.ubuntu.com/security/notices/USN-5486-1
bdu	www.bdu.fstec.ru/vul/2022-05155
bdu	www.bdu.fstec.ru/vul/2021-03385
bdu	www.bdu.fstec.ru/vul/2022-05690
safe-surf	www.safe-surf.ru/specialists/bulletins-nkcki/708868
bdu	www.bdu.fstec.ru/vul/2023-07325
ubuntu	www.ubuntu.com/security/CVE-2021-0146
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

09 Dec 2024 00:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.16.8 - 9.9

CVSS 29

CVSS 35.6

EPSS0.06451

SSVC