6.7

CVE-2021-0054

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Nuc M15 Laptop Kit Lapbc510 Firmware Version < bctgl357.0051
   Intel ≫ Nuc M15 Laptop Kit Lapbc510 Version -
Intel ≫ Nuc M15 Laptop Kit Lapbc710 Firmware Version < bctgl357.0051
   Intel ≫ Nuc M15 Laptop Kit Lapbc710 Version -
Intel ≫ Nuc 11 Pro Board Nuc11tnbi3 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Board Nuc11tnbi3 Version -
Intel ≫ Nuc 11 Pro Board Nuc11tnbi5 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Board Nuc11tnbi5 Version -
Intel ≫ Nuc 11 Pro Board Nuc11tnbi7 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Board Nuc11tnbi7 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi3 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi3 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30l Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30l Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30p Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi30p Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi5 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi5 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50l Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50l Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50w Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi50w Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi7 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi7 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70l Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70l Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70q Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnhi70q Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnki3 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnki3 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnki5 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnki5 Version -
Intel ≫ Nuc 11 Pro Kit Nuc11tnki7 Firmware Version < tntgl357.0052
   Intel ≫ Nuc 11 Pro Kit Nuc11tnki7 Version -
Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Firmware Version < qncflx70.0059
   Intel ≫ Nuc 9 Pro Kit Nuc9v7qnx Version -
Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Firmware Version < qncflx70.0059
   Intel ≫ Nuc 9 Pro Kit Nuc9vxqnx Version -
Intel ≫ Nuc Kit Nuc8i7hnk Firmware Version < hnkbli70.86a.0065
   Intel ≫ Nuc Kit Nuc8i7hnk Version -
Intel ≫ Nuc Kit Nuc8i7hvk Firmware Version < hnkbli70.86a.0065
   Intel ≫ Nuc Kit Nuc8i7hvk Version -
Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Firmware Version < chaplcel.0051
   Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Version -
Intel ≫ Nuc Board Nuc8cchb Firmware Version < chaplcel.0051
   Intel ≫ Nuc Board Nuc8cchb Version -
Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Firmware Version < pnwhl357.0039
   Intel ≫ Nuc 8 Pro Board Nuc8i3pnb Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Firmware Version < pnwhl357.0039
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnh Version -
Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Firmware Version < pnwhl357.0039
   Intel ≫ Nuc 8 Pro Kit Nuc8i3pnk Version -
Intel ≫ Nuc Kit Nuc7cjyh Firmware Version < jyglkcpx.86a.0057
   Intel ≫ Nuc Kit Nuc7cjyh Version -
Intel ≫ Nuc Kit Nuc7pjyh Firmware Version < jyglkcpx.86a.0057
   Intel ≫ Nuc Kit Nuc7pjyh Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.25% 0.154
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00511.html
Patch
Vendor Advisory