CVE-2021-0126

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01275.5Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable a denial of service v CVE-2021-01295.7Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.CVE-2021-01316.5Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow CVE-2021-01324.9Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged u CVE-2021-01338.1Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiall CVE-2021-01344.9Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable d CVE-2021-01356.7Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to pote CVE-2021-01437.8Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to CVE-2021-01446.7Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of p CVE-2021-01455.5Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information di CVE-2021-01466.8Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potenti CVE-2021-01474.4Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_l