What’s Vulnerable › Vulnerabilities

CVE-2021-0054

Description

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

How to fix

Upgrade to a fixed version: Intel Nuc 10 Performance Kit Nuc10I3Fnh Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I3Fnhf Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I3Fnk Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I5Fnh Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I5Fnhf Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I5Fnhj Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I5Fnk Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I5Fnkp Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I7Fnh Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I7Fnhc Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I7Fnk Firmware fncml.0050; Intel Nuc 10 Performance Kit Nuc10I7Fnkp Firmware fncml.0050. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-0054 or the next vulnerability affects your stack