Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HIntel Xeon Bronze 3204
HWIntelall versionsIntel Xeon Bronze 3204 Firmware
OSIntelall versionsIntel Xeon Bronze 3206r
HWIntelall versionsIntel Xeon Bronze 3206r Firmware
OSIntelall versionsIntel Xeon Gold 5215
HWIntelall versionsIntel Xeon Gold 5215 Firmware
OSIntelall versionsIntel Xeon Gold 5215l
HWIntelall versionsIntel Xeon Gold 5215l Firmware
OSIntelall versionsIntel Xeon Gold 5217
HWIntelall versionsIntel Xeon Gold 5217 Firmware
OSIntelall versionsIntel Xeon Gold 5218
HWIntelall versionsIntel Xeon Gold 5218b
HWIntelall versionsIntel Xeon Gold 5218b Firmware
OSIntelall versionsIntel Xeon Gold 5218 Firmware
OSIntelall versionsIntel Xeon Gold 5218n
HWIntelall versionsIntel Xeon Gold 5218n Firmware
OSIntelall versionsIntel Xeon Gold 5218r
HWIntelall versionsIntel Xeon Gold 5218r Firmware
OSIntelall versionsIntel Xeon Gold 5218t
HWIntelall versionsIntel Xeon Gold 5218t Firmware
OSIntelall versionsIntel Xeon Gold 5220
HWIntelall versionsIntel Xeon Gold 5220 Firmware
OSIntelall versionsIntel Xeon Gold 5220r
HWIntelall versionsIntel Xeon Gold 5220r Firmware
OSIntelall versionsIntel Xeon Gold 5220s
HWIntelall versionsIntel Xeon Gold 5220s Firmware
OSIntelall versionsIntel Xeon Gold 5220t
HWIntelall versionsIntel Xeon Gold 5220t Firmware
OSIntelall versionsIntel Xeon Gold 5222
HWIntelall versionsIntel Xeon Gold 5222 Firmware
OSIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Related vulnerabilities
CVE-2021-42013CRITICAL9.8⚠ KEVPL ✓same product
Apache HTTP Server 2.4.50 — path traversal i RCE (niewystarczający patch CVE-2021-41773)
CVE-2021-41773CRITICAL9.8⚠ KEVPL ✓same product
Apache HTTP Server 2.4.49 — path traversal i RCE (aktywnie exploitowany)
CVE-2021-40438CRITICAL9.0⚠ KEVPL ✓same product
SSRF w mod_proxy Apache HTTP Server — przekierowanie żądań przez atakującego
CVE-2021-44790CRITICAL9.8PL ✓same product
Buffer overflow w mod_lua Apache HTTP Server — parser multipart
CVE-2021-43527CRITICAL9.8PL ✓same product
Heap overflow w NSS przy weryfikacji podpisów DSA/RSA-PSS (CVE-2021-43527)