CVE-2021-0157

Medium

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…

intel·NVD-CWE-Other·Published 2021-11-17

CVSS

6.7

EPSS

0.03

KEV

Exploits

cve.orgen

178 chars

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

NVDen

178 chars

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Una administración del flujo de control insuficiente en el firmware del BIOS para algunos procesadores Intel® puede permitir a un usuario privilegiado habilitar potencialmente una escalada de privilegios por medio de un acceso local

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.6	3.9	6.4	AV:L/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	cve.org	6.7	—	—	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	ENISA EUVD	6.7	—	—	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H