Strix
26.1K

CVE-2021-0144

MEDIUMCVSS 6.7/10EPSS 0.33%

Last modified

CVE-2021-0144 is a medium-severity vulnerability rated 6.7/10 on the CVSS scale. Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.. EPSS estimates a 0.33% chance of exploitation in the next 30 days.

Description

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.

Metrics

CVSS 3.1
6.7/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.33%

24.4th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
IntelAtom C3000All versions
IntelAtom C3308All versions
IntelAtom C3336All versions
IntelAtom C3338All versions
IntelAtom C3338rAll versions
IntelAtom C3436lAll versions
IntelAtom C3508All versions
IntelAtom C3538All versions
IntelAtom C3558All versions
IntelAtom C3558rAll versions
IntelAtom C3558rcAll versions
IntelAtom C3708All versions
IntelAtom C3750All versions
IntelAtom C3758All versions
IntelAtom C3758rAll versions
IntelAtom C3808All versions
IntelAtom C3830All versions
IntelAtom C3850All versions
IntelAtom C3858All versions
IntelAtom C3950All versions
IntelAtom C3955All versions
IntelAtom C3958All versions
IntelCore I3-6006uAll versions
IntelCore I3-6098pAll versions
IntelCore I3-6100All versions
IntelCore I3-6100eAll versions
IntelCore I3-6100hAll versions
IntelCore I3-6100tAll versions
IntelCore I3-6100teAll versions
IntelCore I3-6100uAll versions
IntelCore I3-6102eAll versions
IntelCore I3-6110uAll versions
IntelCore I3-6120All versions
IntelCore I3-6120tAll versions
IntelCore I3-6157uAll versions
IntelCore I3-6167uAll versions
IntelCore I3-6300All versions
IntelCore I3-6300tAll versions
IntelCore I3-6320All versions
IntelCore I3-6320tAll versions
IntelCore I3-7007uAll versions
IntelCore I3-7020uAll versions
IntelCore I3-7100All versions
IntelCore I3-7100eAll versions
IntelCore I3-7100hAll versions
IntelCore I3-7100tAll versions
IntelCore I3-7100uAll versions
IntelCore I3-7101eAll versions
IntelCore I3-7101teAll versions
IntelCore I3-7102eAll versions

Showing 50 of 1312 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2021-0144?
Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.
How severe is CVE-2021-0144?
CVE-2021-0144 has a CVSS score of 6.7/10 (MEDIUM severity). The EPSS model estimates a 0.33% probability of exploitation in the next 30 days.
How do I fix CVE-2021-0144?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2021-0144?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST