Cyber Resilience

CVE-2021-0115

Medium

Published: 09 February 2022

Published
09 February 2022
Modified
05 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0027 50.5th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2021-0115 is a medium-severity Classic Buffer Overflow (CWE-120) vulnerability in Intel Atom C3308. Its CVSS base score is 6.7 (Medium).

Operationally, ranked in the top 49.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CWE(s)
CWE-120

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

intel
atom c3308
all versions
intel
atom c3336
all versions
intel
atom c3338
all versions
intel
atom c3338r
all versions
intel
atom c3436l
all versions
intel
atom c3508
all versions
intel
atom c3538
all versions
intel
atom c3558
all versions
intel
atom c3558r
all versions
intel
atom c3708
all versions
+671 more product configuration(s) — see NVD for full list

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

SC-27 Platform-independent Applications
addresses: CWE-120

Platform-independent managed code eliminates the need for unchecked native buffer copies that are the root cause of classic buffer overflows.

References