CVE-2021-0188

Published: May 12, 2022Modified: May 5, 2025

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected (37)

Intel

37 products

Xeon E3 1558l V5 Firmware

Xeon E3 1565l V5 Firmware

Xeon E3 1578l V5 Firmware

Xeon E3 1585 V5 Firmware

Xeon E3 1585l V5 Firmware

Xeon E3 1515m V5 Firmware

Xeon E3 1545m V5 Firmware

Xeon E3 1575m V5 Firmware

Xeon E3 1220 V5 Firmware

Xeon E3 1225 V5 Firmware

Xeon E3 1230 V5 Firmware

Xeon E3 1235l V5 Firmware

Xeon E3 1240 V5 Firmware

Xeon E3 1240l V5 Firmware

Xeon E3 1245 V5 Firmware

Xeon E3 1260l V5 Firmware

Xeon E3 1268l V5 Firmware

Xeon E3 1270 V5 Firmware

Xeon E3 1275 V5 Firmware

Xeon E3 1280 V5 Firmware

Xeon E3 1505l V5 Firmware

Xeon E3 1505m V5 Firmware

Xeon E3 1535m V5 Firmware

Xeon E3 1285 V6 Firmware

Xeon E3 1501l V6 Firmware

Xeon E3 1501m V6 Firmware

Xeon E3 1220 V6 Firmware

Xeon E3 1225 V6 Firmware

Xeon E3 1230 V6 Firmware

Xeon E3 1240 V6 Firmware

Xeon E3 1245 V6 Firmware

Xeon E3 1270 V6 Firmware

Xeon E3 1275 V6 Firmware

Xeon E3 1280 V6 Firmware

Xeon E3 1505l V6 Firmware

Xeon E3 1505m V6 Firmware

Xeon E3 1535m V6 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1558l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1558l V5	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1565l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1565l V5	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1578l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1578l V5	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1585 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1585 V5	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1585l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1585l V5	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1515m V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1515m V5	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1545m V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1545m V5	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1575m V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1575m V5	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1220 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1220 V5	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1225 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1225 V5	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1230 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1230 V5	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1235l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1235l V5	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1240 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1240 V5	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1240l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1240l V5	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1245 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1245 V5	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1260l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1260l V5	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1268l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1268l V5	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1270 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1270 V5	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1275 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1275 V5	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1280 V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1280 V5	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1505l V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1505l V5	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1505m V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1505m V5	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1535m V5 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1535m V5	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1285 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1285 V6	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1501l V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1501l V6	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1501m V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1501m V6	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1220 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1220 V6	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1225 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1225 V6	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1230 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1230 V6	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1240 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1240 V6	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1245 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1245 V6	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1270 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1270 V6	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1275 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1275 V6	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1280 V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1280 V6	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1505l V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1505l V6	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1505m V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1505m V6	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Intel Xeon E3 1535m V6 Firmware	All versions

Running on/with	Platform Versions
Intel Xeon E3 1535m V6	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

https://security.netapp.com/advisory/ntap-20220818-0003/

Source: secure@intel.com

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Source: secure@intel.com

Vendor Advisory

https://security.netapp.com/advisory/ntap-20220818-0003/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.