CVE-2021-0111
Medium
Published: 09 February 2022
Published
09 February 2022
Modified
05 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
6.7
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0024
48.1th percentile
Risk Priority
14
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-0111 is a medium-severity NULL Pointer Dereference (CWE-476) vulnerability in Intel Atom C3308. Its CVSS base score is 6.7 (Medium).
Operationally, ranked at the 48.1th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-2730
Vulnerability details
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
atom c3308
all versions
intel
atom c3336
all versions
intel
atom c3338
all versions
intel
atom c3338r
all versions
intel
atom c3436l
all versions
intel
atom c3508
all versions
intel
atom c3538
all versions
intel
atom c3558
all versions
intel
atom c3558r
all versions
intel
atom c3708
all versions
+671 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.