Vulnerability Description
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netapp | Cloud Backup | - |
| Netapp | Fas\/Aff Bios | - |
| Intel | Xeon Bronze 3206R Firmware | - |
| Intel | Xeon Bronze 3206R | - |
| Intel | Xeon Gold 5218R Firmware | - |
| Intel | Xeon Gold 5218R | - |
| Intel | Xeon Gold 5220R Firmware | - |
| Intel | Xeon Gold 5220R | - |
| Intel | Xeon Gold 6208U Firmware | - |
| Intel | Xeon Gold 6208U | - |
| Intel | Xeon Gold 6226R Firmware | - |
| Intel | Xeon Gold 6226R | - |
| Intel | Xeon Gold 6230R Firmware | - |
| Intel | Xeon Gold 6230R | - |
| Intel | Xeon Gold 6238R Firmware | - |
| Intel | Xeon Gold 6238R | - |
| Intel | Xeon Gold 6240R Firmware | - |
| Intel | Xeon Gold 6240R | - |
| Intel | Xeon Gold 6242R Firmware | - |
| Intel | Xeon Gold 6242R | - |
Related Weaknesses (CWE)
References
- https://security.netapp.com/advisory/ntap-20220210-0007/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.Vendor Advisory
- https://security.netapp.com/advisory/ntap-20220210-0007/Third Party Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.Vendor Advisory
FAQ
What is CVE-2021-0156?
CVE-2021-0156 is a vulnerability with a CVSS score of 7.8 (HIGH). Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access.
How severe is CVE-2021-0156?
CVE-2021-0156 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-0156?
Check the references section above for vendor advisories and patch information. Affected products include: Netapp Cloud Backup, Netapp Fas\/Aff Bios, Intel Xeon Bronze 3206R Firmware, Intel Xeon Bronze 3206R, Intel Xeon Gold 5218R Firmware.