CVEvulnerability

CVE-2021-0154

7.8 HIGH Published 2022-05-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-20

Description

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected configurations

• intel xeon e-2314 firmware • intel xeon e-2324g firmware • intel xeon e-2334 firmware • intel xeon e-2336 firmware • intel xeon e-2356g firmware • intel xeon e-2374g firmware • intel xeon e-2378 firmware • intel xeon e-2378g firmware • intel xeon e-2386g firmware • intel xeon e-2388g firmware • intel xeon e-2226ge firmware • intel xeon e-2254me firmware • intel xeon e-2254ml firmware • intel xeon e-2276me firmware • intel xeon e-2276ml firmware • intel xeon e-2278ge firmware • intel xeon e-2278gel firmware • intel xeon e-2224 firmware • intel xeon e-2224g firmware • intel xeon e-2226g firmware • intel xeon e-2234 firmware • intel xeon e-2236 firmware • intel xeon e-2244g firmware • intel xeon e-2246g firmware • intel xeon e-2274g firmware • intel xeon e-2276g firmware • intel xeon e-2276m firmware • intel xeon e-2278g firmware • intel xeon e-2286g firmware • intel xeon e-2286m firmware • intel xeon e-2288g firmware • intel xeon e-2124 firmware • intel xeon e-2124g firmware • intel xeon e-2126g firmware • intel xeon e-2134 firmware • intel xeon e-2136 firmware • intel xeon e-2144g firmware • intel xeon e-2146g firmware • intel xeon e-2174g firmware • intel xeon e-2176g firmware • intel xeon e-2186g firmware • intel xeon e-2176m firmware • intel xeon e-2186m firmware • intel xeon e3-1285 v6 firmware • intel xeon e3-1501l v6 firmware • intel xeon e3-1501m v6 firmware • intel xeon e3-1220 v6 firmware • intel xeon e3-1225 v6 firmware • intel xeon e3-1230 v6 firmware • intel xeon e3-1240 v6 firmware • intel xeon e3-1245 v6 firmware • intel xeon e3-1270 v6 firmware • intel xeon e3-1275 v6 firmware • intel xeon e3-1280 v6 firmware • intel xeon e3-1505l v6 firmware • intel xeon e3-1505m v6 firmware • intel xeon e3-1535m v6 firmware • intel xeon e3-1558l v5 firmware • intel xeon e3-1565l v5 firmware • intel xeon e3-1578l v5 firmware … and 193 more

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References