CVE-2021-0187
Low
Published: 16 February 2023
Published
16 February 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
3.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
EPSS Score
0.0014
34.7th percentile
Risk Priority
6
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-0187 is a low-severity an unspecified weakness vulnerability in Intel Xeon Gold 6342 Firmware. Its CVSS base score is 3.2 (Low).
Operationally, ranked at the 34.7th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-2806
Vulnerability details
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
xeon gold 6342 firmware
all versions
intel
xeon gold 6346 firmware
all versions
intel
xeon gold 6330 firmware
all versions
intel
xeon platinum 8360y firmware
all versions
intel
xeon gold 6354 firmware
all versions
intel
xeon gold 6314u firmware
all versions
intel
xeon gold 6338n firmware
all versions
intel
xeon silver 4314 firmware
all versions
intel
xeon silver 4316 firmware
all versions
intel
xeon gold 5318y firmware
all versions
+43 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.