CVE-2021-0146

MediumCVSS 6.8/10Last modified Oct 8, 2026

Description

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) processors which	See references

References

https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20211210-0006/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlVendor Advisory

Timeline

Published: Nov 17, 2021
Last modified: Oct 8, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-01474.4Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1-21ww02a and pmc_fw_l CVE-2021-01484.4Insertion of information into log file in firmware for some Intel(R) SSD DC may allow a privileged user to potentially enable information di CVE-2021-01517.8Improper access control in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products in Windows 10 may allo CVE-2021-01525.5Improper verification of cryptographic signature in the installer for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) produc CVE-2021-01537.8Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privi CVE-2021-01547.8Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of CVE-2021-01555.5Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information discl CVE-2021-01567.8Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation o CVE-2021-01576.7Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esc CVE-2021-01586.7Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2021-01597.8Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enab CVE-2021-01607.8Uncontrolled search path in some Intel(R) NUC Pro Chassis Element AverMedia Capture Card drivers before version 3.0.64.143 may allow an auth