CVE-2021-0091
High
Published: 09 February 2022
Published
09 February 2022
Modified
05 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0036
58.2th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-0091 is a high-severity an unspecified weakness vulnerability in Intel Atom C3308. Its CVSS base score is 7.8 (High).
Operationally, ranked in the top 41.8% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-2710
Vulnerability details
Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
atom c3308
all versions
intel
atom c3336
all versions
intel
atom c3338
all versions
intel
atom c3338r
all versions
intel
atom c3436l
all versions
intel
atom c3508
all versions
intel
atom c3538
all versions
intel
atom c3558
all versions
intel
atom c3558r
all versions
intel
atom c3708
all versions
+671 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.