CVE Feed

    Dashboard / CVE / CVE-2021-0153

    CVE-2021-0153

    Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

    Published:May 12, 2022
    Last Modified:May 5, 2025
    EPS:May 12, 2022
    EPSS Score:0.00175
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Core I9-10900x
    Vendor
    Intel
    Product
    Core I9-10900x Firmware
    Vendor
    Intel
    Product
    Core I9-10920x
    Vendor
    Intel
    Product
    Core I9-10920x Firmware
    Vendor
    Intel
    Product
    Core I9-10940x
    Vendor
    Intel
    Product
    Core I9-10940x Firmware
    Vendor
    Intel
    Product
    Core I9-10980xe
    Vendor
    Intel
    Product
    Core I9-10980xe Firmware
    Vendor
    Intel
    Product
    Xeon E5-1603 V4
    Vendor
    Intel
    Product
    Xeon E5-1603 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1607 V4
    Vendor
    Intel
    Product
    Xeon E5-1607 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1620 V4
    Vendor
    Intel
    Product
    Xeon E5-1620 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1630 V4
    Vendor
    Intel
    Product
    Xeon E5-1630 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1650 V4
    Vendor
    Intel
    Product
    Xeon E5-1650 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1660 V4
    Vendor
    Intel
    Product
    Xeon E5-1660 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-1680 V4
    Vendor
    Intel
    Product
    Xeon E5-1680 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2603 V4
    Vendor
    Intel
    Product
    Xeon E5-2603 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2608l V4
    Vendor
    Intel
    Product
    Xeon E5-2608l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2609 V4
    Vendor
    Intel
    Product
    Xeon E5-2609 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2618l V4
    Vendor
    Intel
    Product
    Xeon E5-2618l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2620 V4
    Vendor
    Intel
    Product
    Xeon E5-2620 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2623 V4
    Vendor
    Intel
    Product
    Xeon E5-2623 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2628l V4
    Vendor
    Intel
    Product
    Xeon E5-2628l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2630 V4
    Vendor
    Intel
    Product
    Xeon E5-2630 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2630l V4
    Vendor
    Intel
    Product
    Xeon E5-2630l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2637 V4
    Vendor
    Intel
    Product
    Xeon E5-2637 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2640 V4
    Vendor
    Intel
    Product
    Xeon E5-2640 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2643 V4
    Vendor
    Intel
    Product
    Xeon E5-2643 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2648l V4
    Vendor
    Intel
    Product
    Xeon E5-2648l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2650 V4
    Vendor
    Intel
    Product
    Xeon E5-2650 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2650l V4
    Vendor
    Intel
    Product
    Xeon E5-2650l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2658 V4
    Vendor
    Intel
    Product
    Xeon E5-2658 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2660 V4
    Vendor
    Intel
    Product
    Xeon E5-2660 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2667 V4
    Vendor
    Intel
    Product
    Xeon E5-2667 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2679 V4
    Vendor
    Intel
    Product
    Xeon E5-2679 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2680 V4
    Vendor
    Intel
    Product
    Xeon E5-2680 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2683 V4
    Vendor
    Intel
    Product
    Xeon E5-2683 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2687w V4
    Vendor
    Intel
    Product
    Xeon E5-2687w V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2689 V4
    Vendor
    Intel
    Product
    Xeon E5-2689 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2690 V4
    Vendor
    Intel
    Product
    Xeon E5-2690 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2695 V4
    Vendor
    Intel
    Product
    Xeon E5-2695 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2697 V4
    Vendor
    Intel
    Product
    Xeon E5-2697 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2697a V4
    Vendor
    Intel
    Product
    Xeon E5-2697a V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2698 V4
    Vendor
    Intel
    Product
    Xeon E5-2698 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2699 V4
    Vendor
    Intel
    Product
    Xeon E5-2699 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2699a V4
    Vendor
    Intel
    Product
    Xeon E5-2699a V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-2699r V4
    Vendor
    Intel
    Product
    Xeon E5-2699r V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4610 V4
    Vendor
    Intel
    Product
    Xeon E5-4610 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4610a V4
    Vendor
    Intel
    Product
    Xeon E5-4610a V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4620 V4
    Vendor
    Intel
    Product
    Xeon E5-4620 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4627 V4
    Vendor
    Intel
    Product
    Xeon E5-4627 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4628l V4
    Vendor
    Intel
    Product
    Xeon E5-4628l V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4640 V4
    Vendor
    Intel
    Product
    Xeon E5-4640 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4650 V4
    Vendor
    Intel
    Product
    Xeon E5-4650 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4655 V4
    Vendor
    Intel
    Product
    Xeon E5-4655 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4660 V4
    Vendor
    Intel
    Product
    Xeon E5-4660 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4667 V4
    Vendor
    Intel
    Product
    Xeon E5-4667 V4 Firmware
    Vendor
    Intel
    Product
    Xeon E5-4669 V4
    Vendor
    Intel
    Product
    Xeon E5-4669 V4 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-43505 (CVSS 4.1) — Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged …
    CVE-2022-38083 (CVSS 6.1) — Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to poten…
    CVE-2022-40982 (CVSS 6.5) — Information exposure through microarchitectural state after transient execution in certain vector execution un…
    CVE-2022-26006 (CVSS 8.2) — Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…
    CVE-2022-26373 (CVSS 5.5) — Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an …
    CVE-2021-0155 (CVSS 5.5) — Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potent…
    CVE-2021-33124 (CVSS 6.7) — Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged …
    CVE-2021-0190 (CVSS 7.8) — Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentiall…
    CVE-2021-33123 (CVSS 7.8) — Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privile…
    CVE-2021-0154 (CVSS 7.8) — Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High