CVE-2021-0106: High severity intel ipmctl vulnerability
Published Jun 9, 2021
·Updated
Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
138 affected components
Intel Ipmctl Windows<2.00.00.3842
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318h
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320h
Intel Xeon Gold 5320t
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6328h
Intel Xeon Gold 6328hl
Intel Xeon Gold 6330
Intel Xeon Gold 6330h
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6348h
Intel Xeon Gold 6354
Intel Xeon Platinum 8321hc
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352m
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8353h
Intel Xeon Platinum 8354h
Intel Xeon Platinum 8356h
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360h
Intel Xeon Platinum 8360hl
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8376h
Intel Xeon Platinum 8376hl
Intel Xeon Platinum 8380
Intel Xeon Platinum 8380h
Intel Xeon Platinum 8380hl
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Intel Ipmctl Windows<1.00.00.3515
Intel Xeon Bronze 3204
Intel Xeon Bronze 3206r
Intel Xeon Gold 5215
Intel Xeon Gold 5215l
Intel Xeon Gold 5217
Intel Xeon Gold 5218
Intel Xeon Gold 5218b
Intel Xeon Gold 5218n
Intel Xeon Gold 5218r
Intel Xeon Gold 5218t
Intel Xeon Gold 5219y
Intel Xeon Gold 5220
Intel Xeon Gold 5220r
Intel Xeon Gold 5220s
Intel Xeon Gold 5220t
Intel Xeon Gold 5222
Intel Xeon Gold 6208u
Intel Xeon Gold 6209u
Intel Xeon Gold 6210u
Intel Xeon Gold 6212u
Intel Xeon Gold 6222
Intel Xeon Gold 6222v
Intel Xeon Gold 6226
Intel Xeon Gold 6226r
Intel Xeon Gold 6230
Intel Xeon Gold 6230n
Intel Xeon Gold 6230r
Intel Xeon Gold 6230t
Intel Xeon Gold 6234
Intel Xeon Gold 6238
Intel Xeon Gold 6238l
Intel Xeon Gold 6238r
Intel Xeon Gold 6238t
Intel Xeon Gold 6240
Intel Xeon Gold 6240l
Intel Xeon Gold 6240r
Intel Xeon Gold 6240y
Intel Xeon Gold 6242
Intel Xeon Gold 6242r
Intel Xeon Gold 6244
Intel Xeon Gold 6246
Intel Xeon Gold 6246r
Intel Xeon Gold 6248
Intel Xeon Gold 6248r
Intel Xeon Gold 6250
Intel Xeon Gold 6250l
Intel Xeon Gold 6252
Intel Xeon Gold 6252n
Intel Xeon Gold 6254
Intel Xeon Gold 6256
Intel Xeon Gold 6258r
Intel Xeon Gold 6262
Intel Xeon Gold 6262v
Intel Xeon Gold 6269y
Intel Xeon Platinum 8253
Intel Xeon Platinum 8256
Intel Xeon Platinum 8260
Intel Xeon Platinum 8260l
Intel Xeon Platinum 8260y
Intel Xeon Platinum 8268
Intel Xeon Platinum 8270
Intel Xeon Platinum 8274
Intel Xeon Platinum 8276
Intel Xeon Platinum 8276l
Intel Xeon Platinum 8280
Intel Xeon Platinum 8280l
Intel Xeon Platinum 8284
Intel Xeon Platinum 9221
Intel Xeon Platinum 9222
Intel Xeon Platinum 9242
Intel Xeon Platinum 9282
Intel Xeon Silver 4208
Intel Xeon Silver 4209t
Intel Xeon Silver 4210
Intel Xeon Silver 4210r
Intel Xeon Silver 4210t
Intel Xeon Silver 4214
Intel Xeon Silver 4214r
Intel Xeon Silver 4214y
Intel Xeon Silver 4215
Intel Xeon Silver 4215r
Intel Xeon Silver 4216
Event History
Jun 9, 2021
CVE Published
via MITRE·07:13 PM
Data Sourced
via MITRE·07:13 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-0106?
The severity of CVE-2021-0106 is rated as high due to the potential for privilege escalation.
2
How do I fix CVE-2021-0106?
To fix CVE-2021-0106, update to Intel(R) Optane(TM) DC Persistent Memory for Windows software version 2.00.00.3842 or 1.00.00.3515 or later.
3
Who is affected by CVE-2021-0106?
CVE-2021-0106 affects users of Intel(R) Optane(TM) DC Persistent Memory for Windows software versions prior to 2.00.00.3842 or 1.00.00.3515.
4
What type of attack can exploit CVE-2021-0106?
CVE-2021-0106 can be exploited by an authenticated user to escalate privileges through local access.
5
When was CVE-2021-0106 published?
CVE-2021-0106 was published on January 12, 2021.