Vulnerability-Lookup

WID-SEC-W-2022-2225

Vulnerability from csaf_certbund - Published: 2022-02-08 23:00 - Updated: 2022-12-05 23:00

Summary

Intel BIOS: Mehrere Schwachstellen

Severity

Hoch

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Angriff: Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS, HPE Proliant, HPE Synergy sowie Lenovo Computer ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.

Betroffene Betriebssysteme: - NetApp Appliance - BIOS/Firmware

CVE-2021-0091

Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungeprüfte Rückgabewerte, Pufferüberläufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zurückzuführen. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuführen.

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0092

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0093

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0099

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0103

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0107

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0111

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0114

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0115

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0116

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0117

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0118

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0119

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0124

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0125

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

CVE-2021-0156

Affected products

Known affected 6 products

Product	Identifier	Version
Lenovo Computer Lenovo	`cpe:/o:lenovo:lenovo_computer:-`	—
HPE Synergy HPE	`cpe:/h:hpe:synergy:-`	—
IBM QRadar SIEM IBM	`cpe:/a:ibm:qradar_siem:-`	—
NetApp FAS NetApp	`cpe:/h:netapp:fas:-`	—
Intel BIOS Intel	`cpe:/h:intel:bios:-`	—
HPE ProLiant HPE	`cpe:/h:hp:proliant:-`	—

References

8 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.ibm.com/support/pages/node/6845359	external
https://www.intel.com/content/www/us/en/security-…	external
https://support.hpe.com/hpesc/public/docDisplay?d…	external
https://support.lenovo.com/us/en/product_security…	external
https://security.netapp.com/advisory/ntap-2022021…	external
https://support.hpe.com/hpesc/public/docDisplay?e…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "hoch"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS, HPE Proliant, HPE Synergy sowie Lenovo Computer ausnutzen, um seine Privilegien zu erh\u00f6hen oder einen Denial of Service Zustand herbeizuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- NetApp Appliance\n- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2022-2225 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2022/wid-sec-w-2022-2225.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2022-2225 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2022-2225"
      },
      {
        "category": "external",
        "summary": "IBM Security Bulletin 6845359 vom 2022-12-06",
        "url": "https://www.ibm.com/support/pages/node/6845359"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory: INTEL-SA-00527 vom 2022-02-08",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
      },
      {
        "category": "external",
        "summary": "HPE SECURITY BULLETIN vom 2022-02-08",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04243en_us"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory vom 2022-02-08",
        "url": "https://support.lenovo.com/us/en/product_security/LEN-77639"
      },
      {
        "category": "external",
        "summary": "NetApp Security Advisory NTAP-20220210-0007 vom 2022-02-11",
        "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
      },
      {
        "category": "external",
        "summary": "HPE Security Bulletin",
        "url": "https://support.hpe.com/hpesc/public/docDisplay?elq_mid=17739\u0026elq_cid=67018031\u0026docId=hpesbhf04243en_us"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel BIOS: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2022-12-05T23:00:00.000+00:00",
      "generator": {
        "date": "2024-08-15T17:39:09.569+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.5"
        }
      },
      "id": "WID-SEC-W-2022-2225",
      "initial_release_date": "2022-02-08T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2022-02-08T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2022-02-13T23:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von NetApp aufgenommen"
        },
        {
          "date": "2022-03-06T23:00:00.000+00:00",
          "number": "3",
          "summary": "Neue Updates aufgenommen"
        },
        {
          "date": "2022-12-05T23:00:00.000+00:00",
          "number": "4",
          "summary": "Neue Updates von IBM aufgenommen"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "HPE ProLiant",
            "product": {
              "name": "HPE ProLiant",
              "product_id": "T009310",
              "product_identification_helper": {
                "cpe": "cpe:/h:hp:proliant:-"
              }
            }
          },
          {
            "category": "product_name",
            "name": "HPE Synergy",
            "product": {
              "name": "HPE Synergy",
              "product_id": "T019820",
              "product_identification_helper": {
                "cpe": "cpe:/h:hpe:synergy:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "HPE"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "IBM QRadar SIEM",
            "product": {
              "name": "IBM QRadar SIEM",
              "product_id": "T021415",
              "product_identification_helper": {
                "cpe": "cpe:/a:ibm:qradar_siem:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "IBM"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Intel BIOS",
            "product": {
              "name": "Intel BIOS",
              "product_id": "T016742",
              "product_identification_helper": {
                "cpe": "cpe:/h:intel:bios:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T006520",
              "product_identification_helper": {
                "cpe": "cpe:/o:lenovo:lenovo_computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "NetApp FAS",
            "product": {
              "name": "NetApp FAS",
              "product_id": "T011540",
              "product_identification_helper": {
                "cpe": "cpe:/h:netapp:fas:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "NetApp"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-0091",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0091"
    },
    {
      "cve": "CVE-2021-0092",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0092"
    },
    {
      "cve": "CVE-2021-0093",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0093"
    },
    {
      "cve": "CVE-2021-0099",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0099"
    },
    {
      "cve": "CVE-2021-0103",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0103"
    },
    {
      "cve": "CVE-2021-0107",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0107"
    },
    {
      "cve": "CVE-2021-0111",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0111"
    },
    {
      "cve": "CVE-2021-0114",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0114"
    },
    {
      "cve": "CVE-2021-0115",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0115"
    },
    {
      "cve": "CVE-2021-0116",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0116"
    },
    {
      "cve": "CVE-2021-0117",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0117"
    },
    {
      "cve": "CVE-2021-0118",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0118"
    },
    {
      "cve": "CVE-2021-0119",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0119"
    },
    {
      "cve": "CVE-2021-0124",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0124"
    },
    {
      "cve": "CVE-2021-0125",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0125"
    },
    {
      "cve": "CVE-2021-0156",
      "notes": [
        {
          "category": "description",
          "text": "Im BIOS von verschiedenen Intel Prozessoren existieren mehrere Schwachstellen. Die Schwachstellen sind auf Fehler im Kontrollfluss, ungepr\u00fcfte R\u00fcckgabewerte, Puffer\u00fcberl\u00e4ufe, Fehler mit Zeigern, Out-of-Bounds-Lese und Schreibfehler, fehlende Eingabevalidierungen, NULL-Zeiger-Dereferenzierung, fehlerhafte Initialisierung von Variablen, unzureichende Zugriffs- und Berechtigungskontrolle zur\u00fcckzuf\u00fchren. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern oder einen Denial of Service Zustand herbeizuf\u00fchren."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T019820",
          "T021415",
          "T011540",
          "T016742",
          "T009310"
        ]
      },
      "release_date": "2022-02-08T23:00:00.000+00:00",
      "title": "CVE-2021-0156"
    }
  ]
}

CVE-2021-0091 (GCVE-0-2021-0091)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:02

Summary

Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.907Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0091",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:44.923220Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "NVD-CWE-Other",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:02:54.173Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:08.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0091",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0091",
    "datePublished": "2022-02-09T22:04:04.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:02:54.173Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0092 (GCVE-0-2021-0092)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:02

Summary

Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE

denial of service

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.888Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0092",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:21:59.688203Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:02:43.731Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:10.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0092",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0092",
    "datePublished": "2022-02-09T22:04:05.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:02:43.731Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0093 (GCVE-0-2021-0093)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:02

Summary

Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.

Severity

4.4 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE

denial of service

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.960Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 4.4,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0093",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:22:01.192481Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-276",
                "description": "CWE-276 Incorrect Default Permissions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:02:32.437Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": " denial of service ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:26.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0093",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": " denial of service "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0093",
    "datePublished": "2022-02-09T22:04:03.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:02:32.437Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0099 (GCVE-0-2021-0099)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:02

Summary

Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:25:01.807Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0099",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:48.184025Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "NVD-CWE-Other",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:02:20.230Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:02.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0099",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0099",
    "datePublished": "2022-02-09T22:04:01.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:02:20.230Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0103 (GCVE-0-2021-0103)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:02

Summary

Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.018Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0103",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:43.375307Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "NVD-CWE-Other",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:02:09.572Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:12.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0103",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0103",
    "datePublished": "2022-02-09T22:04:05.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:02:09.572Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0107 (GCVE-0-2021-0107)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:01

Summary

Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.218Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0107",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:36.728708Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-252",
                "description": "CWE-252 Unchecked Return Value",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:01:58.696Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": " escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:20.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0107",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": " escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0107",
    "datePublished": "2022-02-09T22:04:10.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:01:58.696Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0111 (GCVE-0-2021-0111)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:01

Summary

NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.215Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0111",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:39.601080Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-476",
                "description": "CWE-476 NULL Pointer Dereference",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:01:48.091Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:06.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0111",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0111",
    "datePublished": "2022-02-09T22:04:07.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:01:48.091Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0114 (GCVE-0-2021-0114)

Vulnerability from cvelistv5 – Published: 2021-08-16 18:36 – Updated: 2024-08-03 15:32

Summary

Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Severity

No CVSS data available.

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.290Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:14.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0114",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0114",
    "datePublished": "2021-08-16T18:36:49.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2024-08-03T15:32:09.290Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0115 (GCVE-0-2021-0115)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:01

Summary

Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

6.7 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.221Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 6.7,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "HIGH",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0115",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:38.233626Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-120",
                "description": "CWE-120 Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:01:36.602Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": " escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:28.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0115",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": " escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0115",
    "datePublished": "2022-02-09T22:04:08.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:01:36.602Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-0116 (GCVE-0-2021-0116)

Vulnerability from cvelistv5 – Published: 2022-02-09 22:04 – Updated: 2025-05-05 17:01

Summary

Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

escalation of privilege

Assigner

intel

References

2 references

URL	Tags
https://www.intel.com/content/www/us/en/security-…	x_refsource_MISC
https://security.netapp.com/advisory/ntap-2022021…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T15:32:09.168Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "LOCAL",
              "availabilityImpact": "HIGH",
              "baseScore": 7.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2021-0116",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-04-23T13:31:35.405597Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-787",
                "description": "CWE-787 Out-of-bounds Write",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-05T17:01:27.244Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege ",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-02-10T09:07:04.000Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2021-0116",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Intel(R) Processors",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "See references"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "escalation of privilege "
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html",
              "refsource": "MISC",
              "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html"
            },
            {
              "name": "https://security.netapp.com/advisory/ntap-20220210-0007/",
              "refsource": "CONFIRM",
              "url": "https://security.netapp.com/advisory/ntap-20220210-0007/"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2021-0116",
    "datePublished": "2022-02-09T22:04:11.000Z",
    "dateReserved": "2020-10-22T00:00:00.000Z",
    "dateUpdated": "2025-05-05T17:01:27.244Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

WID-SEC-W-2022-2225

CVE-2021-0091 (GCVE-0-2021-0091)

CVE-2021-0092 (GCVE-0-2021-0092)

CVE-2021-0093 (GCVE-0-2021-0093)

CVE-2021-0099 (GCVE-0-2021-0099)

CVE-2021-0103 (GCVE-0-2021-0103)

CVE-2021-0107 (GCVE-0-2021-0107)

CVE-2021-0111 (GCVE-0-2021-0111)

CVE-2021-0114 (GCVE-0-2021-0114)

CVE-2021-0115 (GCVE-0-2021-0115)

CVE-2021-0116 (GCVE-0-2021-0116)

Tags

Sightings

Nomenclature