CVE-2021-0153

Published: May 12, 2022Modified: May 5, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected (53)

Intel

53 products

Core I9 10900x Firmware

Core I9 10920x Firmware

Core I9 10940x Firmware

Core I9 10980xe Firmware

Xeon E5 1603 V4 Firmware

Xeon E5 1607 V4 Firmware

Xeon E5 1620 V4 Firmware

Xeon E5 1630 V4 Firmware

Xeon E5 1650 V4 Firmware

Xeon E5 1660 V4 Firmware

Xeon E5 1680 V4 Firmware

Xeon E5 2603 V4 Firmware

Xeon E5 2608l V4 Firmware

Xeon E5 2609 V4 Firmware

Xeon E5 2618l V4 Firmware

Xeon E5 2620 V4 Firmware

Xeon E5 2623 V4 Firmware

Xeon E5 2628l V4 Firmware

Xeon E5 2630 V4 Firmware

Xeon E5 2630l V4 Firmware

Xeon E5 2637 V4 Firmware

Xeon E5 2640 V4 Firmware

Xeon E5 2643 V4 Firmware

Xeon E5 2648l V4 Firmware

Xeon E5 2650 V4 Firmware

Xeon E5 2650l V4 Firmware

Xeon E5 2658 V4 Firmware

Xeon E5 2660 V4 Firmware

Xeon E5 2667 V4 Firmware

Xeon E5 2679 V4 Firmware

Xeon E5 2680 V4 Firmware

Xeon E5 2683 V4 Firmware

Xeon E5 2687w V4 Firmware

Xeon E5 2689 V4 Firmware

Xeon E5 2690 V4 Firmware

Xeon E5 2695 V4 Firmware

Xeon E5 2697 V4 Firmware

Xeon E5 2697a V4 Firmware

Xeon E5 2698 V4 Firmware

Xeon E5 2699 V4 Firmware

Xeon E5 2699a V4 Firmware

Xeon E5 2699r V4 Firmware

Xeon E5 4610 V4 Firmware

Xeon E5 4610a V4 Firmware

Xeon E5 4620 V4 Firmware

Xeon E5 4627 V4 Firmware

Xeon E5 4628l V4 Firmware

Xeon E5 4640 V4 Firmware

Xeon E5 4650 V4 Firmware

Xeon E5 4655 V4 Firmware

Xeon E5 4660 V4 Firmware

Xeon E5 4667 V4 Firmware

Xeon E5 4669 V4 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Core I9 10900x Firmware	All versions

Running on/with	Platform Versions
Intel Core I9 10900x	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Core I9 10920x Firmware	All versions

Running on/with	Platform Versions
Intel Core I9 10920x	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Core I9 10940x Firmware	All versions

Running on/with	Platform Versions
Intel Core I9 10940x	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Core I9 10980xe Firmware	All versions

Running on/with	Platform Versions
Intel Core I9 10980xe	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1603 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1603 V4	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1607 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1607 V4	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1620 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1620 V4	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1630 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1630 V4	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1650 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1650 V4	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1660 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1660 V4	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 1680 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 1680 V4	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2603 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2603 V4	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2608l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2608l V4	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2609 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2609 V4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2618l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2618l V4	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2620 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2620 V4	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2623 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2623 V4	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2628l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2628l V4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2630 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2630 V4	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2630l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2630l V4	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2637 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2637 V4	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2640 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2640 V4	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2643 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2643 V4	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2648l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2648l V4	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2650 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2650 V4	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2650l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2650l V4	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2658 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2658 V4	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2660 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2660 V4	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2667 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2667 V4	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2679 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2679 V4	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2680 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2680 V4	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2683 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2683 V4	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2687w V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2687w V4	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2689 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2689 V4	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2690 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2690 V4	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2695 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2695 V4	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2697 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2697 V4	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2697a V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2697a V4	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2698 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2698 V4	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2699 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2699 V4	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2699a V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2699a V4	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 2699r V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 2699r V4	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4610 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4610 V4	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4610a V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4610a V4	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4620 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4620 V4	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4627 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4627 V4	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4628l V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4628l V4	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4640 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4640 V4	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4650 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4650 V4	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4655 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4655 V4	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4660 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4660 V4	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4667 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4667 V4	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E5 4669 V4 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E5 4669 V4	All versions

Related CWEs

CWE-787

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://security.netapp.com/advisory/ntap-20220818-0003/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20220818-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.