Permissions, Privileges, and Access Controls in Intel Celeron N4000 Processors - CVE-2021-33150

 

Permissions, Privileges, and Access Controls in Intel Celeron N4000 Processors - CVE-2021-33150

Published: March 9, 2022 / Updated: May 15, 2022


Vulnerability identifier: #VU61197
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-33150
CWE-ID: CWE-264
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker with physical access to escalate privileges on the system.

The vulnerability exists due to hardware allows activation of test or debug logic at runtime for some Intel Trace Hub instances, which leads to security restrictions bypass and privilege escalation.


Affected software

Intel Celeron N4000 Processors

How to mitigate CVE-2021-33150

Install updates from vendor's website.


External References

Related Security Bulletins