CVE-2021-0125

MediumCVSS 6.6/10Last modified Jun 17, 2026

Description

Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via physical access.

Metrics

CVSS 3.1 6.6/10CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-665

Affected software

No affected versions have been published.

Timeline

Published: Feb 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01268.0Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable CVE-2021-01275.5Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service v CVE-2021-01295.7Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.CVE-2021-01316.5Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow CVE-2021-01324.9Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged u CVE-2021-01338.1Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiall CVE-2021-01344.9Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable d CVE-2021-01356.7Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to pote CVE-2021-01437.8Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to CVE-2021-01446.7Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of p CVE-2021-01455.5Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information di CVE-2021-01466.8Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potenti