high7.8
CVE-2021-0154
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via loca…
Impact
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Xeon E-2314 Firmware | All versions |
| Intel | Xeon E-2324g Firmware | All versions |
| Intel | Xeon E-2334 Firmware | All versions |
| Intel | Xeon E-2336 Firmware | All versions |
| Intel | Xeon E-2356g Firmware | All versions |
| Intel | Xeon E-2374g Firmware | All versions |
| Intel | Xeon E-2378 Firmware | All versions |
| Intel | Xeon E-2378g Firmware | All versions |
| Intel | Xeon E-2386g Firmware | All versions |
| Intel | Xeon E-2388g Firmware | All versions |
| Intel | Xeon E-2226ge Firmware | All versions |
| Intel | Xeon E-2254me Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.netapp.com/advisory/ntap-20220818-0003/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
- https://security.netapp.com/advisory/ntap-20220818-0003/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html