CVE Feed

    Dashboard / CVE / CVE-2021-0188

    CVE-2021-0188

    Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

    Published:May 12, 2022
    Last Modified:May 5, 2025
    EPS:May 12, 2022
    EPSS Score:0.00118
    CVSS Score:7.8

    Affected Products

    Vendor
    Intel
    Product
    Xeon E3-1220 V5
    Vendor
    Intel
    Product
    Xeon E3-1220 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1220 V6
    Vendor
    Intel
    Product
    Xeon E3-1220 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1225 V5
    Vendor
    Intel
    Product
    Xeon E3-1225 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1225 V6
    Vendor
    Intel
    Product
    Xeon E3-1225 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1230 V5
    Vendor
    Intel
    Product
    Xeon E3-1230 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1230 V6
    Vendor
    Intel
    Product
    Xeon E3-1230 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1235l V5
    Vendor
    Intel
    Product
    Xeon E3-1235l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1240 V5
    Vendor
    Intel
    Product
    Xeon E3-1240 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1240 V6
    Vendor
    Intel
    Product
    Xeon E3-1240 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1240l V5
    Vendor
    Intel
    Product
    Xeon E3-1240l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1245 V5
    Vendor
    Intel
    Product
    Xeon E3-1245 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1245 V6
    Vendor
    Intel
    Product
    Xeon E3-1245 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1260l V5
    Vendor
    Intel
    Product
    Xeon E3-1260l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1268l V5
    Vendor
    Intel
    Product
    Xeon E3-1268l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1270 V5
    Vendor
    Intel
    Product
    Xeon E3-1270 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1270 V6
    Vendor
    Intel
    Product
    Xeon E3-1270 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1275 V5
    Vendor
    Intel
    Product
    Xeon E3-1275 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1275 V6
    Vendor
    Intel
    Product
    Xeon E3-1275 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1280 V5
    Vendor
    Intel
    Product
    Xeon E3-1280 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1280 V6
    Vendor
    Intel
    Product
    Xeon E3-1280 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1285 V6
    Vendor
    Intel
    Product
    Xeon E3-1285 V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1501l V6
    Vendor
    Intel
    Product
    Xeon E3-1501l V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1501m V6
    Vendor
    Intel
    Product
    Xeon E3-1501m V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1505l V5
    Vendor
    Intel
    Product
    Xeon E3-1505l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1505l V6
    Vendor
    Intel
    Product
    Xeon E3-1505l V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1505m V5
    Vendor
    Intel
    Product
    Xeon E3-1505m V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1505m V6
    Vendor
    Intel
    Product
    Xeon E3-1505m V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1515m V5
    Vendor
    Intel
    Product
    Xeon E3-1515m V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1535m V5
    Vendor
    Intel
    Product
    Xeon E3-1535m V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1535m V6
    Vendor
    Intel
    Product
    Xeon E3-1535m V6 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1545m V5
    Vendor
    Intel
    Product
    Xeon E3-1545m V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1558l V5
    Vendor
    Intel
    Product
    Xeon E3-1558l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1565l V5
    Vendor
    Intel
    Product
    Xeon E3-1565l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1575m V5
    Vendor
    Intel
    Product
    Xeon E3-1575m V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1578l V5
    Vendor
    Intel
    Product
    Xeon E3-1578l V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1585 V5
    Vendor
    Intel
    Product
    Xeon E3-1585 V5 Firmware
    Vendor
    Intel
    Product
    Xeon E3-1585l V5
    Vendor
    Intel
    Product
    Xeon E3-1585l V5 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-21180 (CVSS 5.5) — Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a …
    CVE-2021-0189 (CVSS 7.8) — Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged us…
    CVE-2021-33124 (CVSS 6.7) — Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged …
    CVE-2021-33123 (CVSS 7.8) — Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privile…
    CVE-2021-0154 (CVSS 7.8) — Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…
    CVE-2021-0127 (CVSS 5.5) — Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentiall…
    CVE-2021-0114 (CVSS 6.7) — Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially…
    CVE-2021-0144 (CVSS 6.7) — Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potenti…
    CVE-2020-24486 (CVSS 5.5) — Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to pote…
    CVE-2020-12360 (CVSS 7.8) — Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High