CVE-2021-0106

Published: Jun 9, 2021Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (2)

Products: Intel: Ipmctl

Intel

1 product

Ipmctl

Configuration A

1 vulnerable · 54 platform

Vulnerable Software	Affected Versions
Intel Ipmctl	Before 2.00.00.3842

Running on/with	Platform Versions
Intel Xeon Gold 5315y	All versions
Intel Xeon Gold 5317	All versions
Intel Xeon Gold 5318h	All versions
Intel Xeon Gold 5318n	All versions
Intel Xeon Gold 5318s	All versions
Intel Xeon Gold 5318y	All versions
Intel Xeon Gold 5320	All versions
Intel Xeon Gold 5320h	All versions
Intel Xeon Gold 5320t	All versions
Intel Xeon Gold 6312u	All versions
Intel Xeon Gold 6314u	All versions
Intel Xeon Gold 6326	All versions
Intel Xeon Gold 6328h	All versions
Intel Xeon Gold 6328hl	All versions
Intel Xeon Gold 6330	All versions
Intel Xeon Gold 6330h	All versions
Intel Xeon Gold 6330n	All versions
Intel Xeon Gold 6334	All versions
Intel Xeon Gold 6336y	All versions
Intel Xeon Gold 6338	All versions
Intel Xeon Gold 6338n	All versions
Intel Xeon Gold 6338t	All versions
Intel Xeon Gold 6342	All versions
Intel Xeon Gold 6346	All versions
Intel Xeon Gold 6348	All versions
Intel Xeon Gold 6348h	All versions
Intel Xeon Gold 6354	All versions
Intel Xeon Platinum 8321hc	All versions
Intel Xeon Platinum 8351n	All versions
Intel Xeon Platinum 8352m	All versions
Intel Xeon Platinum 8352s	All versions
Intel Xeon Platinum 8352v	All versions
Intel Xeon Platinum 8352y	All versions
Intel Xeon Platinum 8353h	All versions
Intel Xeon Platinum 8354h	All versions
Intel Xeon Platinum 8356h	All versions
Intel Xeon Platinum 8358	All versions
Intel Xeon Platinum 8358p	All versions
Intel Xeon Platinum 8360h	All versions
Intel Xeon Platinum 8360hl	All versions
Intel Xeon Platinum 8360y	All versions
Intel Xeon Platinum 8362	All versions
Intel Xeon Platinum 8368	All versions
Intel Xeon Platinum 8368q	All versions
Intel Xeon Platinum 8376h	All versions
Intel Xeon Platinum 8376hl	All versions
Intel Xeon Platinum 8380	All versions
Intel Xeon Platinum 8380h	All versions
Intel Xeon Platinum 8380hl	All versions
Intel Xeon Silver 4309y	All versions
Intel Xeon Silver 4310	All versions
Intel Xeon Silver 4310t	All versions
Intel Xeon Silver 4314	All versions
Intel Xeon Silver 4316	All versions

Configuration B

1 vulnerable · 82 platform

Vulnerable Software	Affected Versions
Intel Ipmctl	Before 1.00.00.3515

Running on/with	Platform Versions
Intel Xeon Bronze 3204	All versions
Intel Xeon Bronze 3206r	All versions
Intel Xeon Gold 5215	All versions
Intel Xeon Gold 5215l	All versions
Intel Xeon Gold 5217	All versions
Intel Xeon Gold 5218	All versions
Intel Xeon Gold 5218b	All versions
Intel Xeon Gold 5218n	All versions
Intel Xeon Gold 5218r	All versions
Intel Xeon Gold 5218t	All versions
Intel Xeon Gold 5219y	All versions
Intel Xeon Gold 5220	All versions
Intel Xeon Gold 5220r	All versions
Intel Xeon Gold 5220s	All versions
Intel Xeon Gold 5220t	All versions
Intel Xeon Gold 5222	All versions
Intel Xeon Gold 6208u	All versions
Intel Xeon Gold 6209u	All versions
Intel Xeon Gold 6210u	All versions
Intel Xeon Gold 6212u	All versions
Intel Xeon Gold 6222	All versions
Intel Xeon Gold 6222v	All versions
Intel Xeon Gold 6226	All versions
Intel Xeon Gold 6226r	All versions
Intel Xeon Gold 6230	All versions
Intel Xeon Gold 6230n	All versions
Intel Xeon Gold 6230r	All versions
Intel Xeon Gold 6230t	All versions
Intel Xeon Gold 6234	All versions
Intel Xeon Gold 6238	All versions
Intel Xeon Gold 6238l	All versions
Intel Xeon Gold 6238r	All versions
Intel Xeon Gold 6238t	All versions
Intel Xeon Gold 6240	All versions
Intel Xeon Gold 6240l	All versions
Intel Xeon Gold 6240r	All versions
Intel Xeon Gold 6240y	All versions
Intel Xeon Gold 6242	All versions
Intel Xeon Gold 6242r	All versions
Intel Xeon Gold 6244	All versions
Intel Xeon Gold 6246	All versions
Intel Xeon Gold 6246r	All versions
Intel Xeon Gold 6248	All versions
Intel Xeon Gold 6248r	All versions
Intel Xeon Gold 6250	All versions
Intel Xeon Gold 6250l	All versions
Intel Xeon Gold 6252	All versions
Intel Xeon Gold 6252n	All versions
Intel Xeon Gold 6254	All versions
Intel Xeon Gold 6256	All versions
Intel Xeon Gold 6258r	All versions
Intel Xeon Gold 6262	All versions
Intel Xeon Gold 6262v	All versions
Intel Xeon Gold 6269y	All versions
Intel Xeon Platinum 8253	All versions
Intel Xeon Platinum 8256	All versions
Intel Xeon Platinum 8260	All versions
Intel Xeon Platinum 8260l	All versions
Intel Xeon Platinum 8260y	All versions
Intel Xeon Platinum 8268	All versions
Intel Xeon Platinum 8270	All versions
Intel Xeon Platinum 8274	All versions
Intel Xeon Platinum 8276	All versions
Intel Xeon Platinum 8276l	All versions
Intel Xeon Platinum 8280	All versions
Intel Xeon Platinum 8280l	All versions
Intel Xeon Platinum 8284	All versions
Intel Xeon Platinum 9221	All versions
Intel Xeon Platinum 9222	All versions
Intel Xeon Platinum 9242	All versions
Intel Xeon Platinum 9282	All versions
Intel Xeon Silver 4208	All versions
Intel Xeon Silver 4209t	All versions
Intel Xeon Silver 4210	All versions
Intel Xeon Silver 4210r	All versions
Intel Xeon Silver 4210t	All versions
Intel Xeon Silver 4214	All versions
Intel Xeon Silver 4214r	All versions
Intel Xeon Silver 4214y	All versions
Intel Xeon Silver 4215	All versions
Intel Xeon Silver 4215r	All versions
Intel Xeon Silver 4216	All versions

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00541.html

Source: secure@intel.com

Vendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00541.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.