CVE-2021-0060: High severity intel c620 series firmware vulnerability

Q: What is the severity of CVE-2021-0060?

CVE-2021-0060 is rated as high severity due to insufficient compartmentalization in the HECI subsystem of Intel's firmware.

Q: How do I fix CVE-2021-0060?

To fix CVE-2021-0060, update the affected Intel firmware to the latest versions as indicated in the Intel advisory.

Q: What products are affected by CVE-2021-0060?

CVE-2021-0060 affects various Intel firmware products, including the c620 and c240 series among others.

Q: What is the impact of CVE-2021-0060?

The impact of CVE-2021-0060 includes potential unauthorized access and manipulation of system resources.

Q: Is CVE-2021-0060 being actively exploited?

As of the last reports, there have been no noted active exploitations of CVE-2021-0060 in the wild.

Published Feb 9, 2022

Updated

Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPSE504.01.04.516.0, SPSE504.04.04.033.0, SPSE504.04.03.281.0, SPSE503.01.03.116.0, SPSE305.01.04.309.0, SPS02.04.00.101.0, SPSSoC-A05.00.03.114.0, SPSSoC-X04.00.04.326.0, SPSSoC-X03.00.03.117.0, IGNE591.00.00.167.0, SPSPHI03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.

Affected Software

376 affected components

Intel C620a Series Firmware<sps_e5_04.04.03.281.0

Intel C621a

Intel C627a

Intel C629a

Intel C620 Series Firmware<sps_e5_04.01.04.516.0

Intel C621

Intel C622

Intel C624

Intel C625

Intel C626

Intel C627

Intel C628

Intel C629

Intel C240 Series Firmware<sps_e3_05.01.04.309.0

Intel C242

Intel C246

Intel Cm246

Intel Atom P5000 Series Firmware<sps_soc-a_05.00.03.114.0

Intel Atom P5921b

Intel Atom P5931b

Intel Atom P5942b

Intel Atom P5962b

Intel Atom C3000 Series Firmware<sps_soc-a_04.00.04.501.0

Intel Atom C3308

Intel Atom C3336

Intel Atom C3338

Intel Atom C3338r

Intel Atom C3436l

Intel Atom C3508

Intel Atom C3538

Intel Atom C3558

Intel Atom C3558r

Intel Atom C3708

Intel Atom C3750

Intel Atom C3758

Intel Atom C3758r

Intel Atom C3808

Intel Atom C3830

Intel Atom C3850

Intel Atom C3858

Intel Atom C3950

Intel Atom C3955

Intel Atom C3958

Intel Atom C610 Series Firmware<sps_phi_03.01.03.078.0

Intel Atom C612

Intel Xeon D-1500 Series Firmware<sps_soc-x_03.00.03.117.0

Intel Xeon D-1513n

Intel Xeon D-1518

Intel Xeon D-1520

Intel Xeon D-1521

Intel Xeon D-1523n

Intel Xeon D-1527

Intel Xeon D-1528

Intel Xeon D-1529

Intel Xeon D-1531

Intel Xeon D-1533n

Intel Xeon D-1537

Intel Xeon D-1539

Intel Xeon D-1540

Intel Xeon D-1541

Intel Xeon D-1543n

Intel Xeon D-1548

Intel Xeon D-1553n

Intel Xeon D-1557

Intel Xeon D-1559

Intel Xeon D-1567

Intel Xeon D-1571

Intel Xeon D-1577

Intel Xeon D 2000 Series Firmware<sps_phi_03.01.03.078.0

Intel Xeon D-2123it

Intel Xeon D-2141i

Intel Xeon D-2142it

Intel Xeon D-2143it

Intel Xeon D-2145nt

Intel Xeon D-2146nt

Intel Xeon D-2161i

Intel Xeon D-2163it

Intel Xeon D-2166nt

Intel Xeon D-2173it

Intel Xeon D-2177nt

Intel Xeon D-2183it

Intel Xeon D-2187nt

Intel 11th Generation Core Series Firmware<csme_15.0.35

Intel Core I3-11100he

Intel Core I3-1110g4

Intel Core I3-1115g4

Intel Core I3-1115g4e

Intel Core I3-1115gre

Intel Core I3-1120g4

Intel Core I3-1125g4

Intel Core I5-11260h

Intel Core I5-11300h

Intel Core I5-1130g7

Intel Core I5-11320h

Intel Core I5-1135g7

Intel Core I5-11400

Intel Core I5-11400f

Intel Core I5-11400h

Intel Core I5-11400t

Intel Core I5-1140g7

Intel Core I5-1145g7

Intel Core I5-1145g7e

Intel Core I5-1145gre

Intel Core I5-11500

Intel Core I5-11500h

Intel Core I5-11500he

Intel Core I5-11500t

Intel Core I5-1155g7

Intel Core I5-11600

Intel Core I5-11600k

Intel Core I5-11600kf

Intel Core I5-11600t

Intel Core I7-11370h

Intel Core I7-11375h

Intel Core I7-11390h

Intel Core I7-11600h

Intel Core I7-1160g7

Intel Core I7-1165g7

Intel Core I7-11700

Intel Core I7-11700f

Intel Core I7-11700k

Intel Core I7-11700kf

Intel Core I7-11700t

Intel Core I7-11800h

Intel Core I7-1180g7

Intel Core I7-11850h

Intel Core I7-11850he

Intel Core I7-1185g7

Intel Core I7-1185g7e

Intel Core I7-1185gre

Intel Core I7-1195g7

Intel Core I9-11900

Intel Core I9-11900f

Intel Core I9-11900h

Intel Core I9-11900k

Intel Core I9-11900kf

Intel Core I9-11900t

Intel Core I9-11950h

Intel Core I9-11980hk

Intel Xeon W-1300 Series Firmware<csme_15.0.35

Intel Xeon W-1350

Intel Xeon W-1350p

Intel Xeon W-1370

Intel Xeon W-1370p

Intel Xeon W-1390

Intel Xeon W-1390p

Intel Xeon W-1390t

Intel Pentium Gold Series Firmware<csme_15.0.35

Intel Pentium Gold 4410y

Intel Pentium Gold 4415u

Intel Pentium Gold 4415y

Intel Pentium Gold 4417u

Intel Pentium Gold 4425y

Intel Pentium Gold 5405u

Intel Pentium Gold 6405u

Intel Pentium Gold 6500y

Intel Pentium Gold 7505

Intel Pentium Gold G5400

Intel Pentium Gold G5400t

Intel Pentium Gold G5420

Intel Pentium Gold G5420t

Intel Pentium Gold G5500

Intel Pentium Gold G5500t

Intel Pentium Gold G5600

Intel Pentium Gold G5600t

Intel Pentium Gold G5620

Intel Pentium Gold G6400

Intel Pentium Gold G6400e

Intel Pentium Gold G6400t

Intel Pentium Gold G6400te

Intel Pentium Gold G6405

Intel Pentium Gold G6405t

Intel Pentium Gold G6500

Intel Pentium Gold G6500t

Intel Pentium Gold G6505

Intel Pentium Gold G6505t

Intel Pentium Gold G6600

Intel Pentium Gold G6605

Intel Pentium Gold G7400

Intel Pentium Gold G7400e

Intel Pentium Gold G7400t

Intel Pentium Gold G7400te

Intel Celeron 6000 Series Firmware<csme_15.0.35

Intel Celeron 6305

Intel Celeron 6305e

Intel Celeron 6600he

NetApp Cloud Backup

NetApp Hci Compute Node Bios

NetApp Hci Storage Node Bios

NetApp Solidfire Bios

All of the following

Intel C620a Series Firmware<sps_e5_04.04.03.281.0

Any of the following

Intel C621a

Intel C627a

Intel C629a

All of the following

Intel C620 Series Firmware<sps_e5_04.01.04.516.0

Any of the following

Intel C621

Intel C622

Intel C624

Intel C625

Intel C626

Intel C627

Intel C628

Intel C629

All of the following

Intel C240 Series Firmware<sps_e3_05.01.04.309.0

Any of the following

Intel C242

Intel C246

Intel Cm246

All of the following

Intel Atom P5000 Series Firmware<sps_soc-a_05.00.03.114.0

Any of the following

Intel Atom P5921b

Intel Atom P5931b

Intel Atom P5942b

Intel Atom P5962b

All of the following

Intel Atom C3000 Series Firmware<sps_soc-a_04.00.04.501.0

Any of the following

Intel Atom C3308

Intel Atom C3336

Intel Atom C3338

Intel Atom C3338r

Intel Atom C3436l

Intel Atom C3508

Intel Atom C3538

Intel Atom C3558

Intel Atom C3558r

Intel Atom C3708

Intel Atom C3750

Intel Atom C3758

Intel Atom C3758r

Intel Atom C3808

Intel Atom C3830

Intel Atom C3850

Intel Atom C3858

Intel Atom C3950

Intel Atom C3955

Intel Atom C3958

All of the following

Intel Atom C610 Series Firmware<sps_phi_03.01.03.078.0

Intel Atom C612

All of the following

Intel Xeon D-1500 Series Firmware<sps_soc-x_03.00.03.117.0

Any of the following

Intel Xeon D-1513n

Intel Xeon D-1518

Intel Xeon D-1520

Intel Xeon D-1521

Intel Xeon D-1523n

Intel Xeon D-1527

Intel Xeon D-1528

Intel Xeon D-1529

Intel Xeon D-1531

Intel Xeon D-1533n

Intel Xeon D-1537

Intel Xeon D-1539

Intel Xeon D-1540

Intel Xeon D-1541

Intel Xeon D-1543n

Intel Xeon D-1548

Intel Xeon D-1553n

Intel Xeon D-1557

Intel Xeon D-1559

Intel Xeon D-1567

Intel Xeon D-1571

Intel Xeon D-1577

All of the following

Intel Xeon D 2000 Series Firmware<sps_phi_03.01.03.078.0

Any of the following

Intel Xeon D-2123it

Intel Xeon D-2141i

Intel Xeon D-2142it

Intel Xeon D-2143it

Intel Xeon D-2145nt

Intel Xeon D-2146nt

Intel Xeon D-2161i

Intel Xeon D-2163it

Intel Xeon D-2166nt

Intel Xeon D-2173it

Intel Xeon D-2177nt

Intel Xeon D-2183it

Intel Xeon D-2187nt

All of the following

Intel 11th Generation Core Series Firmware<csme_15.0.35

Any of the following

Intel Core I3-11100he

Intel Core I3-1110g4

Intel Core I3-1115g4

Intel Core I3-1115g4e

Intel Core I3-1115gre

Intel Core I3-1120g4

Intel Core I3-1125g4

Intel Core I5-11260h

Intel Core I5-11300h

Intel Core I5-1130g7

Intel Core I5-11320h

Intel Core I5-1135g7

Intel Core I5-11400

Intel Core I5-11400f

Intel Core I5-11400h

Intel Core I5-11400t

Intel Core I5-1140g7

Intel Core I5-1145g7

Intel Core I5-1145g7e

Intel Core I5-1145gre

Intel Core I5-11500

Intel Core I5-11500h

Intel Core I5-11500he

Intel Core I5-11500t

Intel Core I5-1155g7

Intel Core I5-11600

Intel Core I5-11600k

Intel Core I5-11600kf

Intel Core I5-11600t

Intel Core I7-11370h

Intel Core I7-11375h

Intel Core I7-11390h

Intel Core I7-11600h

Intel Core I7-1160g7

Intel Core I7-1165g7

Intel Core I7-11700

Intel Core I7-11700f

Intel Core I7-11700k

Intel Core I7-11700kf

Intel Core I7-11700t

Intel Core I7-11800h

Intel Core I7-1180g7

Intel Core I7-11850h

Intel Core I7-11850he

Intel Core I7-1185g7

Intel Core I7-1185g7e

Intel Core I7-1185gre

Intel Core I7-1195g7

Intel Core I9-11900

Intel Core I9-11900f

Intel Core I9-11900h

Intel Core I9-11900k

Intel Core I9-11900kf

Intel Core I9-11900t

Intel Core I9-11950h

Intel Core I9-11980hk

All of the following

Intel Xeon W-1300 Series Firmware<csme_15.0.35

Any of the following

Intel Xeon W-1350

Intel Xeon W-1350p

Intel Xeon W-1370

Intel Xeon W-1370p

Intel Xeon W-1390

Intel Xeon W-1390p

Intel Xeon W-1390t

All of the following

Intel Pentium Gold Series Firmware<csme_15.0.35

Any of the following

Intel Pentium Gold 4410y

Intel Pentium Gold 4415u

Intel Pentium Gold 4415y

Intel Pentium Gold 4417u

Intel Pentium Gold 4425y

Intel Pentium Gold 5405u

Intel Pentium Gold 6405u

Intel Pentium Gold 6500y

Intel Pentium Gold 7505

Intel Pentium Gold G5400

Intel Pentium Gold G5400t

Intel Pentium Gold G5420

Intel Pentium Gold G5420t

Intel Pentium Gold G5500

Intel Pentium Gold G5500t

Intel Pentium Gold G5600

Intel Pentium Gold G5600t

Intel Pentium Gold G5620

Intel Pentium Gold G6400

Intel Pentium Gold G6400e

Intel Pentium Gold G6400t

Intel Pentium Gold G6400te

Intel Pentium Gold G6405

Intel Pentium Gold G6405t

Intel Pentium Gold G6500

Intel Pentium Gold G6500t

Intel Pentium Gold G6505

Intel Pentium Gold G6505t

Intel Pentium Gold G6600

Intel Pentium Gold G6605

Intel Pentium Gold G7400

Intel Pentium Gold G7400e

Intel Pentium Gold G7400t

Intel Pentium Gold G7400te

All of the following

Intel Celeron 6000 Series Firmware<csme_15.0.35

Any of the following

Intel Celeron 6305

Intel Celeron 6305e

Intel Celeron 6600he

Event History

Feb 9, 2022

CVE Published

via MITRE·10:04 PM

Data Sourced

via MITRE·10:04 PM

DescriptionWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-0060?

CVE-2021-0060 is rated as high severity due to insufficient compartmentalization in the HECI subsystem of Intel's firmware.

How do I fix CVE-2021-0060?

To fix CVE-2021-0060, update the affected Intel firmware to the latest versions as indicated in the Intel advisory.

What products are affected by CVE-2021-0060?

CVE-2021-0060 affects various Intel firmware products, including the c620 and c240 series among others.

What is the impact of CVE-2021-0060?

The impact of CVE-2021-0060 includes potential unauthorized access and manipulation of system resources.

Is CVE-2021-0060 being actively exploited?

As of the last reports, there have been no noted active exploitations of CVE-2021-0060 in the wild.

CVE-2021-0060: High severity intel c620 series firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2021-0060?

How do I fix CVE-2021-0060?

What products are affected by CVE-2021-0060?

What is the impact of CVE-2021-0060?

Is CVE-2021-0060 being actively exploited?

Company

Resources

Contact