Skip to content
OpenAdvisories
High WID-SEC-2022-2225 16 CVEs

Intel BIOS: Mehrere Schwachstellen

Published Feb 8, 2022 · Updated Dec 5, 2022 · Revision 4 · de-DE

Vendor: HPE Vendor: IBM Vendor: Intel Vendor: Lenovo Vendor: NETAPP Product: BIOS Product: Computer Product: FAS Product: ProLiant Product: QRadar SIEM Product: Synergy

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS, HPE Proliant, HPE Synergy sowie Lenovo Computer ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 16

  • High 7.8
    CVE-2021-0091

    Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially e…

  • High 7.8
    CVE-2021-0099

    Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to po…

  • High 7.8
    CVE-2021-0116

    Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an e…

  • High 7.8
    CVE-2021-0117

    Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escala…

  • High 7.8
    CVE-2021-0156

    Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially e…

  • Medium 6.7
    CVE-2021-0103

    Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potent…

  • Medium 6.7
    CVE-2021-0107

    Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable e…

  • Medium 6.7
    CVE-2021-0111

    NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable…

  • Medium 6.7
    CVE-2021-0115

    Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati…

  • Medium 6.7
    CVE-2021-0118

    Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an es…

  • Medium 6.6
    CVE-2021-0124

    Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …

  • Medium 6.6
    CVE-2021-0125

    Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …

  • Medium 6.2
    CVE-2021-0119

    Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …

  • Medium 4.4
    CVE-2021-0092

    Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …

  • Medium 4.4
    CVE-2021-0093

    Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially e…

  • Unscored —
    CVE-2021-0114

    Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a…

Revision history

  1. #4

    Neue Updates von IBM aufgenommen

  2. #3

    Neue Updates aufgenommen

  3. #2

    Neue Updates von NetApp aufgenommen

  4. #1

    Initiale Fassung

References