CVE-2021-0146
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Does this matter?
Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.
Description
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.44% probability · 38th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- intel/pentium j6426 firmware · intel/pentium j4205 firmware · intel/pentium j3710 firmware · intel/pentium j2900 firmware · intel/pentium j2850 firmware · intel/celeron j6412 firmware · intel/celeron j6413 firmware · intel/celeron j4125 firmware · intel/celeron j4025 firmware · intel/celeron j3355e firmware · intel/celeron j3455e firmware · intel/celeron j4105 firmware · intel/celeron j4005 firmware · intel/celeron j3455 firmware · intel/celeron j3355 firmware · intel/celeron j3160 firmware · intel/celeron j3060 firmware · intel/celeron j1800 firmware · intel/celeron j1900 firmware · intel/celeron j1850 firmware · +40 more
- Source
- secure@intel.com
EPSS 0.4% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory
- https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.