Back to the CVE list
CVE-2021-0146

Vulnerability in N/a Intel(R) Processors Which

CVSS score

6.8

EPSS probability

%0.4

Risk score

0.0

Published

4 y ago

OverviewPublic Exploits (0)NewsroomVulnerability Timeline
Patch status has not yet been verified

Resmî kaynaklarda yeterli kanıt bulunamadı. Bu sonuç “yama yok” anlamına gelmez.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2021-0146 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2021-0146 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1n/aIntel(R) processors which View
2intelpentium j6426 firmware View
3intelpentium j6426 View
4intelpentium j4205 firmware View
5intelpentium j4205 View
6intelpentium j3710 firmware View
7intelpentium j3710 View
8intelpentium j2900 firmware View
9intelpentium j2900 View
10intelpentium j2850 firmware View
11intelpentium j2850 View
12intelceleron j6412 firmware View
13intelceleron j6412 View
14intelceleron j6413 firmware View
15intelceleron j6413 View
16intelceleron j4125 firmware View
17intelceleron j4125 View
18intelceleron j4025 firmware View
19intelceleron j4025 View
20intelceleron j3355e firmware View
21intelceleron j3355e View
22intelceleron j3455e firmware View
23intelceleron j3455e View
24intelceleron j4105 firmware View
25intelceleron j4105 View
26intelceleron j4005 firmware View
27intelceleron j4005 View
28intelceleron j3455 firmware View
29intelceleron j3455 View
30intelceleron j3355 firmware View
31intelceleron j3355 View
32intelceleron j3160 firmware View
33intelceleron j3160 View
34intelceleron j3060 firmware View
35intelceleron j3060 View
36intelceleron j1800 firmware View
37intelceleron j1800 View
38intelceleron j1900 firmware View
39intelceleron j1900 View
40intelceleron j1850 firmware View
41intelceleron j1850 View
42intelceleron j1750 firmware View
43intelceleron j1750 View
44intelceleron n6210 firmware View
45intelceleron n6210 View
46intelceleron n4505 firmware View
47intelceleron n4505 View
48intelceleron n4500 firmware View
49intelceleron n4500 View
50intelceleron n5105 firmware View
51intelceleron n5105 View
52intelceleron n5100 firmware View
53intelceleron n5100 View
54intelceleron n6211 firmware View
55intelceleron n6211 View
56intelceleron n4120 firmware View
57intelceleron n4120 View
58intelceleron n4020 firmware View
59intelceleron n4020 View
60intelceleron n3350e firmware View
61intelceleron n3350e View
62intelceleron n4000 firmware View
63intelceleron n4000 View
64intelceleron n4100 firmware View
65intelceleron n4100 View
66intelceleron n3350 firmware View
67intelceleron n3350 View
68intelceleron n3450 firmware View
69intelceleron n3450 View
70intelceleron n3060 firmware View
71intelceleron n3060 View
72intelceleron n3160 firmware View
73intelceleron n3160 View
74intelceleron n3010 firmware View
75intelceleron n3010 View
76intelceleron n3000 firmware View
77intelceleron n3000 View
78intelceleron n3050 firmware View
79intelceleron n3050 View
80intelceleron n3150 firmware View
81intelceleron n3150 View
82intelceleron n2808 firmware View
83intelceleron n2808 View
84intelceleron n2840 firmware View
85intelceleron n2840 View
86intelceleron n2940 firmware View
87intelceleron n2940 View
88intelceleron n2807 firmware View
89intelceleron n2807 View
90intelceleron n2830 firmware View
91intelceleron n2830 View
92intelceleron n2930 firmware View
93intelceleron n2930 View
94intelceleron n2806 firmware View
95intelceleron n2806 View
96intelceleron n2920 firmware View
97intelceleron n2920 View
98intelceleron n2820 firmware View
99intelceleron n2820 View
100intelceleron n2815 firmware View
101intelceleron n2815 View
102intelceleron n2805 firmware View
103intelceleron n2805 View
104intelceleron n2810 firmware View
105intelceleron n2810 View
106intelceleron n2910 firmware View
107intelceleron n2910 View
108intelatom x5-e3930 firmware View
109intelatom x5-e3930 View
110intelatom x5-e3940 firmware View
111intelatom x5-e3940 View
112intelatom x7-e3950 firmware View
113intelatom x7-e3950 View
114intelpentium n6415 firmware View
115intelpentium n6415 View
116intelpentium n4200 firmware View
117intelpentium n4200 View
118intelpentium n3710 firmware View
119intelpentium n3710 View
120intelpentium n4200e firmware View
121intelpentium n4200e View
122intelpentium n3700 firmware View
123intelpentium n3700 View
124intelpentium n3540 firmware View
125intelpentium n3540 View
126intelpentium n3530 firmware View
127intelpentium n3530 View
128intelpentium n3520 firmware View
129intelpentium n3520 View
130intelpentium n3510 firmware View
131intelpentium n3510 View
132intelpentium silver n6005 firmware View
133intelpentium silver n6005 View
134intelpentium silver n6000 firmware View
135intelpentium silver n6000 View
136intelpentium silver j5040 firmware View
137intelpentium silver j5040 View
138intelpentium silver n5030 firmware View
139intelpentium silver n5030 View
140intelpentium silver j5005 firmware View
141intelpentium silver j5005 View
142intelpentium silver n5000 firmware View
143intelpentium silver n5000 View
144intelatom c3000 firmware View
145intelatom c3000 View
Total affected vendors: 2|Products: 145

RED HAT CSAF/VEX: Product Impact Check

Red Hat has not yet published a CSAF/VEX impact record for this CVE. This does not mean “not affected”.

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
6.8CVSS V31MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HNVD
4.6CVSS V2—AV:L/AC:L/Au:N/C:P/I:P/A:PNVD

Patch and Remediation Guide

Solution & Remediation Advisory

Patch status unknown

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Until a patch is confirmed, follow the vendor advisory; do not read an unknown status as “no patch”.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

No verified public PoC, exploit repository or Metasploit module has been found for this CVE yet.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-0146 is associated with the following CWEs:

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-20: Improper Input Validation

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-0146 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureFiziksel
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00528.htmlvendor-advisoryhttps://security.netapp.com/advisory/ntap-20211210-0006/vendor-advisory

CVSS Vector Radar Chart

6.8 / 10
Attack VectorLocalComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorPhysical
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)High

Yama durumu bilinmiyor

İncelenen resmî kaynaklarda yama durumu doğrulanamadı. Bu sonuç “yama yok” anlamına gelmez.

Follow the vendor

N
n/a logo
n/a
I
intel logo
intel

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-0146"