PT-2021-12898 · Intel · Intel Brand Verification Tool+1

Cristiano Giuffrida + 3 · Published 2021-06-09 · Updated 2021-07-01 · CVE-2021-0086

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel(R) Processors (affected versions not specified) Intel(R) Brand Verification Tool versions prior to 11.0.0.1225

Description: The issue concerns an observable response discrepancy in floating-point operations for some Intel(R) Processors, which may allow an authorized user to potentially enable information disclosure via local access. Additionally, improper permissions in the installer for the Intel(R) Brand Verification Tool may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations: For Intel(R) Processors, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Intel(R) Brand Verification Tool versions prior to 11.0.0.1225, update to version 11.0.0.1225 or later to resolve the issue.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2021-0086

Affected Products

Intel Brand Verification Tool

Intel Processors

References · 13

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0086 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-0086 · Security Note
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00546.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV · Vendor Advisory
• https://t.me/cvenotify/16508 · Telegram Post
• https://t.me/cvenotify/16505 · Telegram Post
• https://t.me/cvenotify/16039 · Telegram Post
• http://openwall.com/lists/oss-security/2021/06/09/2 · Note
• https://t.me/cvenotify/16499 · Telegram Post
• http://openwall.com/lists/oss-security/2021/06/10/1 · Note
• http://openwall.com/lists/oss-security/2021/06/08/7 · Note