VulnerabilityModified
CVE-2021-0146
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
MEDIUM 6.8EPSS 0.44%
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.44% probability · 37th percentile
- CISA KEV
- Not listed
- Affected
- intel/pentium j6426 firmware · intel/pentium j4205 firmware · intel/pentium j3710 firmware · intel/pentium j2900 firmware · intel/pentium j2850 firmware · intel/celeron j6412 firmware · intel/celeron j6413 firmware · intel/celeron j4125 firmware · intel/celeron j4025 firmware · intel/celeron j3355e firmware · intel/celeron j3455e firmware · intel/celeron j4105 firmware · intel/celeron j4005 firmware · intel/celeron j3455 firmware · intel/celeron j3355 firmware · intel/celeron j3160 firmware · intel/celeron j3060 firmware · intel/celeron j1800 firmware · intel/celeron j1900 firmware · intel/celeron j1850 firmware · +40 more
- Source
- secure@intel.com
References
- https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory
- https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.