Vulnerability Intelligence Report
CVE-2021-0188
Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
No Active Exploit Signals
CVSS Base Score
7.8
HIGH
Exploitability:1.9
Impact Score:5.9
EPSS Probability:0.27%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Weaknesses (CWE)
CWE-119 ↗CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| intel | xeon_e3-1558l_v5_firmware | all |
| intel | xeon_e3-1558l_v5 | all |
| intel | xeon_e3-1565l_v5_firmware | all |
| intel | xeon_e3-1565l_v5 | all |
| intel | xeon_e3-1578l_v5_firmware | all |
| intel | xeon_e3-1578l_v5 | all |
| intel | xeon_e3-1585_v5_firmware | all |
| intel | xeon_e3-1585_v5 | all |
| intel | xeon_e3-1585l_v5_firmware | all |
| intel | xeon_e3-1585l_v5 | all |
| intel | xeon_e3-1515m_v5_firmware | all |
| intel | xeon_e3-1515m_v5 | all |
| intel | xeon_e3-1545m_v5_firmware | all |
| intel | xeon_e3-1545m_v5 | all |
| intel | xeon_e3-1575m_v5_firmware | all |
| intel | xeon_e3-1575m_v5 | all |
| intel | xeon_e3-1220_v5_firmware | all |
| intel | xeon_e3-1220_v5 | all |
| intel | xeon_e3-1225_v5_firmware | all |
| intel | xeon_e3-1225_v5 | all |
| intel | xeon_e3-1230_v5_firmware | all |
| intel | xeon_e3-1230_v5 | all |
| intel | xeon_e3-1235l_v5_firmware | all |
| intel | xeon_e3-1235l_v5 | all |
| intel | xeon_e3-1240_v5_firmware | all |
| intel | xeon_e3-1240_v5 | all |
| intel | xeon_e3-1240l_v5_firmware | all |
| intel | xeon_e3-1240l_v5 | all |
| intel | xeon_e3-1245_v5_firmware | all |
| intel | xeon_e3-1245_v5 | all |
| intel | xeon_e3-1260l_v5_firmware | all |
| intel | xeon_e3-1260l_v5 | all |
| intel | xeon_e3-1268l_v5_firmware | all |
| intel | xeon_e3-1268l_v5 | all |
| intel | xeon_e3-1270_v5_firmware | all |
| intel | xeon_e3-1270_v5 | all |
| intel | xeon_e3-1275_v5_firmware | all |
| intel | xeon_e3-1275_v5 | all |
| intel | xeon_e3-1280_v5_firmware | all |
| intel | xeon_e3-1280_v5 | all |
| intel | xeon_e3-1505l_v5_firmware | all |
| intel | xeon_e3-1505l_v5 | all |
| intel | xeon_e3-1505m_v5_firmware | all |
| intel | xeon_e3-1505m_v5 | all |
| intel | xeon_e3-1535m_v5_firmware | all |
| intel | xeon_e3-1535m_v5 | all |
| intel | xeon_e3-1285_v6_firmware | all |
| intel | xeon_e3-1285_v6 | all |
| intel | xeon_e3-1501l_v6_firmware | all |
| intel | xeon_e3-1501l_v6 | all |
| intel | xeon_e3-1501m_v6_firmware | all |
| intel | xeon_e3-1501m_v6 | all |
| intel | xeon_e3-1220_v6_firmware | all |
| intel | xeon_e3-1220_v6 | all |
| intel | xeon_e3-1225_v6_firmware | all |
| intel | xeon_e3-1225_v6 | all |
| intel | xeon_e3-1230_v6_firmware | all |
| intel | xeon_e3-1230_v6 | all |
| intel | xeon_e3-1240_v6_firmware | all |
| intel | xeon_e3-1240_v6 | all |
| intel | xeon_e3-1245_v6_firmware | all |
| intel | xeon_e3-1245_v6 | all |
| intel | xeon_e3-1270_v6_firmware | all |
| intel | xeon_e3-1270_v6 | all |
| intel | xeon_e3-1275_v6_firmware | all |
| intel | xeon_e3-1275_v6 | all |
| intel | xeon_e3-1280_v6_firmware | all |
| intel | xeon_e3-1280_v6 | all |
| intel | xeon_e3-1505l_v6_firmware | all |
| intel | xeon_e3-1505l_v6 | all |
| intel | xeon_e3-1505m_v6_firmware | all |
| intel | xeon_e3-1505m_v6 | all |
| intel | xeon_e3-1535m_v6_firmware | all |
| intel | xeon_e3-1535m_v6 | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
0.265%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | Intel Corporation · Vendor · USA |
| Reserved | 2020-10-22T00:00:00 |
| Published | 2022-05-12T16:36:14 |
| Last Updated | 2025-05-05T16:55:51 |
Community Chatter & Buzz