MEDIUM · 6.8

CVE-2021-0146

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Vulnerability Description

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelPentium J6426 Firmware-
IntelPentium J6426-
IntelPentium J4205 Firmware-
IntelPentium J4205-
IntelPentium J3710 Firmware-
IntelPentium J3710-
IntelPentium J2900 Firmware-
IntelPentium J2900-
IntelPentium J2850 Firmware-
IntelPentium J2850-
IntelCeleron J6412 Firmware-
IntelCeleron J6412-
IntelCeleron J6413 Firmware-
IntelCeleron J6413-
IntelCeleron J4125 Firmware-
IntelCeleron J4125-
IntelCeleron J4025 Firmware-
IntelCeleron J4025-
IntelCeleron J3355E Firmware-
IntelCeleron J3355E-

References

FAQ

What is CVE-2021-0146?

CVE-2021-0146 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

How severe is CVE-2021-0146?

CVE-2021-0146 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-0146?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Pentium J6426 Firmware, Intel Pentium J6426, Intel Pentium J4205 Firmware, Intel Pentium J4205, Intel Pentium J3710 Firmware.