SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-0155

Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

MEDIUM 5.5EPSS 0.26%

Does this matter?

Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.

Description

Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.26% probability · 18th percentile
CISA KEV
Not listed
Weakness
CWE-252
Affected
intel/xeon e7-8894 v4 firmware · intel/xeon e7-4809 v4 firmware · intel/xeon e7-4820 v4 firmware · intel/xeon e7-4830 v4 firmware · intel/xeon e7-4850 v4 firmware · intel/xeon e7-8860 v4 firmware · intel/xeon e7-8867 v4 firmware · intel/xeon e7-8870 v4 firmware · intel/xeon e7-8880 v4 firmware · intel/xeon e7-8890 v4 firmware · intel/xeon e7-8891 v4 firmware · intel/xeon e7-8893 v4 firmware · intel/xeon d-1702 firmware · intel/xeon d-1712tr firmware · intel/xeon d-1713nt firmware · intel/xeon d-1713nte firmware · intel/xeon d-1714 firmware · intel/xeon d-1715ter firmware · intel/xeon d-1718t firmware · intel/xeon d-1722ne firmware · +40 more
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.