CVE-2021-0158
MediumCVSS 6.7Exploitation Probability (EPSS)
High risk87th percentile - higher than 87% of all known CVEs
Summary
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Risk Assessment
A locally privileged user may escalate their privileges on the system, potentially leading to full compromise of the workstation or server.
Recommendation
Update the BIOS firmware to the latest version provided by the motherboard or system vendor that includes the fix for this vulnerability.
Other vulnerabilities in Intel BIOS firmware
See all- CVE-2022-21198High
Time-of-check time-of-use race condition in BIOS firmware for some Intel processors. A privileged user may exploit it to escalate privileges via local access.
- CVE-2021-0157Medium
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Original NVD description (English source)
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS