PT-2021-12915 · Intel · Intel Processors+1

Hugo Magalhaes · Published 2021-08-16 · Updated 2022-05-03 · CVE-2021-0114

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Intel(R) Processors (affected versions not specified)

Description: The issue is related to an unchecked return value in the firmware for some Intel(R) Processors and insecure default variable initialization for the Intel BSSA DFT feature. This may allow a privileged user to potentially enable an escalation of privilege via local access.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2021-0114

Affected Products

Intel Bssa Dft

Intel Processors

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-0114 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html · Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220210-0007 · Note
• https://t.me/cibsecurity/27409 · Telegram Post