CVE-2021-0131

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-338

Affected software

No affected versions have been published.

Timeline

Published: Jun 9, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01324.9Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged u CVE-2021-01338.1Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentiall CVE-2021-01344.9Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable d CVE-2021-01356.7Improper input validation in the Intel(R) Ethernet Diagnostic Driver for Windows before version 1.4.0.10 may allow a privileged user to pote CVE-2021-01437.8Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to CVE-2021-01446.7Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of p CVE-2021-01455.5Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information di CVE-2021-01466.8Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potenti CVE-2021-01474.4Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_l CVE-2021-01484.4Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information di CVE-2021-01517.8Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allo CVE-2021-01525.5Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) produc