Improper access control in Intel products - CVE-2021-0092
Published: February 15, 2022
Vulnerability identifier: #VU60610
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-0092
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the firmware. A local administrator can bypass implemented security restrictions and perform a denial of service (DoS) attack.
Affected software
2nd Generation Intel Xeon Scalable Processors
Intel Xeon W Processors
Intel Xeon Processor E Family
Intel Xeon D Processors
11th Generation Intel Core Processors
10th Generation Intel Core Processors
8th Generation Intel Core Processors
7th Generation Intel Core Processors
6th Generation Intel Core Processors
Intel Core X-series Processor Family
Intel Atom Processor C3XXX Family
Intel Xeon Scalable Processors
9th Generation Intel Core Processors
IBM Qradar SIEM
EMC Integrated Data Protection Appliance
F5OS
S5212F-ON
S5224F-ON
S5232F-ON
S5248F-ON
Z9264F-ON
N3200-ON
N2200-ON
VEP1425
VEP1445
VEP1485
Z9432F-ON
S5448F-ON
Dell EMC VxRail Appliance
Integrated System for Microsoft Azure Stack Hub
Intel Xeon W Processors
Intel Xeon Processor E Family
Intel Xeon D Processors
11th Generation Intel Core Processors
10th Generation Intel Core Processors
8th Generation Intel Core Processors
7th Generation Intel Core Processors
6th Generation Intel Core Processors
Intel Core X-series Processor Family
Intel Atom Processor C3XXX Family
Intel Xeon Scalable Processors
9th Generation Intel Core Processors
IBM Qradar SIEM
EMC Integrated Data Protection Appliance
F5OS
S5212F-ON
S5224F-ON
S5232F-ON
S5248F-ON
Z9264F-ON
N3200-ON
N2200-ON
VEP1425
VEP1445
VEP1485
Z9432F-ON
S5448F-ON
Dell EMC VxRail Appliance
Integrated System for Microsoft Azure Stack Hub
How to mitigate CVE-2021-0092
Install updates from vendor's website.
S5212F-ON - update to 3.40.0.9-15
S5224F-ON - update to 3.40.0.9-15
S5232F-ON - update to 3.40.0.9-15
S5248F-ON - update to 3.40.0.9-15
Z9264F-ON - update to 3.42.0.9-18
N3200-ON - update to 3.45.0.9-8
N2200-ON - update to 3.45.0.9-11
VEP1425 - update to 3.48.0.9-18
VEP1445 - update to 3.48.0.9-18
VEP1485 - update to 3.48.0.9-18
Z9432F-ON - update to 3.51.0.D-12
S5448F-ON - update to 3.52.0.D-11
Dell EMC VxRail Appliance - update to 4.5.480
Integrated System for Microsoft Azure Stack Hub - update to 2210
S5224F-ON - update to 3.40.0.9-15
S5232F-ON - update to 3.40.0.9-15
S5248F-ON - update to 3.40.0.9-15
Z9264F-ON - update to 3.42.0.9-18
N3200-ON - update to 3.45.0.9-8
N2200-ON - update to 3.45.0.9-11
VEP1425 - update to 3.48.0.9-18
VEP1445 - update to 3.48.0.9-18
VEP1485 - update to 3.48.0.9-18
Z9432F-ON - update to 3.51.0.D-12
S5448F-ON - update to 3.52.0.D-11
Dell EMC VxRail Appliance - update to 4.5.480
Integrated System for Microsoft Azure Stack Hub - update to 2210
External References
Related Security Bulletins
- Multiple vulnerabilities in Intel Processors
- Multiple vulnerabilities in F5OS BIOS
- Multiple vulnerabilities in Dell VxRail
- Multiple vulnerabilities in IBM QRadar SIEM
- Multiple vulnerabilities in Dell Integrated System for Microsoft Azure Stack Hub
- Multiple vulnerabilities in Dell Networking BIOS drivers
- Multiple vulnetabilities in Dell EMC Integrated Data Protection Appliance