CVE-2021-0156

HIGH

Intel(R) Processors - Privilege Escalation

Title source: llm

Description

Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

References (2)

Scores

CVSS v3 7.8
EPSS 0.0024
EPSS Percentile 47.0%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-20
Status published

Affected Products (50)

netapp/cloud_backup
netapp/fas\/aff_bios
intel/xeon_bronze_3206r_firmware
intel/xeon_gold_5218r_firmware
intel/xeon_gold_5220r_firmware
intel/xeon_gold_6208u_firmware
intel/xeon_gold_6226r_firmware
intel/xeon_gold_6230r_firmware
intel/xeon_gold_6238r_firmware
intel/xeon_gold_6240r_firmware
intel/xeon_gold_6242r_firmware
intel/xeon_gold_6246r_firmware
intel/xeon_gold_6248r_firmware
intel/xeon_gold_6250_firmware
intel/xeon_gold_6250l_firmware
... and 35 more

Timeline

Published Feb 09, 2022
Tracked Since Feb 18, 2026