What’s Vulnerable › Vulnerabilities

CVE-2021-0189

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-12 · updated 2026-06-17
• Weakness: CWE-119

Description

Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.

Affected products

• Intel Xeon Bronze 3204 Firmware: all versions
• Intel Xeon Bronze 3206R Firmware: all versions
• Intel Xeon E-2124 Firmware: all versions
• Intel Xeon E-2124G Firmware: all versions
• Intel Xeon E-2126G Firmware: all versions
• Intel Xeon E-2134 Firmware: all versions
• Intel Xeon E-2136 Firmware: all versions
• Intel Xeon E-2144G Firmware: all versions
• Intel Xeon E-2146G Firmware: all versions
• Intel Xeon E-2174G Firmware: all versions
• Intel Xeon E-2176G Firmware: all versions
• Intel Xeon E-2176M Firmware: all versions
• Intel Xeon E-2186G Firmware: all versions
• Intel Xeon E-2186M Firmware: all versions
• Intel Xeon E-2224 Firmware: all versions
• Intel Xeon E-2224G Firmware: all versions
• Intel Xeon E-2226G Firmware: all versions
• Intel Xeon E-2226Ge Firmware: all versions
• Intel Xeon E-2234 Firmware: all versions
• Intel Xeon E-2236 Firmware: all versions
• Intel Xeon E-2244G Firmware: all versions
• Intel Xeon E-2246G Firmware: all versions
• Intel Xeon E-2254Me Firmware: all versions
• Intel Xeon E-2254Ml Firmware: all versions
• Intel Xeon E-2274G Firmware: all versions
• Intel Xeon E-2276G Firmware: all versions
• Intel Xeon E-2276M Firmware: all versions
• Intel Xeon E-2276Me Firmware: all versions
• Intel Xeon E-2276Ml Firmware: all versions
• Intel Xeon E-2278G Firmware: all versions

References

• https://security.netapp.com/advisory/ntap-20220818-0003/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
• https://security.netapp.com/advisory/ntap-20220818-0003/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Get alerted when CVE-2021-0189 or the next vulnerability affects your stack