Medium severity · published Nov 17, 2021
CVE-2021-0146
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via…
6.8
CVSS
0.4%
EPSS
No
On KEV
Description
Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 38% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intel(R) processors which ·
See references · source: vendor
AX
Atom X5-e3930 Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X5-e3940 Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X7-e3950 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J1750 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J1800 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J1850 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J1900 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J3060 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J3160 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J3355 Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J3355e Firmware · Intel
All versions, or not specified · source: NVD