First published: Thu May 12 2022(Updated: )
Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
Intel Core i9-10900X Firmware | ||
Intel Core i9-10900X Firmware | ||
Intel Core i9-10920X Firmware | ||
Intel Core i9-10920X | ||
Intel Core i9-10940X X-Series Firmware | ||
Intel Core i9-10940X | ||
Intel Core i9-10980XE Firmware | ||
Intel Core i9-10980XE Firmware | ||
Intel Xeon E5-1603 v4 Firmware | ||
Intel Xeon E5-1603 v4 | ||
Intel Xeon E5-1607 v4 Firmware | ||
Intel Xeon E5-1607 v4 | ||
Intel Xeon E5-1620 V4 | ||
Intel Xeon E5-1620 V4 | ||
Intel Xeon E5-1630 v4 Firmware | ||
Intel Xeon E5-1630 v4 Firmware | ||
Intel Xeon E5-1650 v4 | ||
Intel Xeon E5-1650 v4 | ||
Intel Xeon E5-1660 v4 | ||
Intel Xeon E5-1660 v4 | ||
Intel Xeon E5-1680 v4 | ||
Intel Xeon E5-1680 v4 | ||
Intel xeon e5-2603 v4 firmware | ||
Intel Xeon E5-2603 v4 | ||
Intel xeon e5-2608l v4 firmware | ||
Intel Xeon E5-2608L V4 | ||
Intel xeon e5-2609 v4 firmware | ||
Intel Xeon E5-2609 V4 | ||
Intel xeon e5-2618l v4 firmware | ||
Intel Xeon E5-2618L v4 | ||
Intel xeon e5-2620 v4 firmware | ||
Intel Xeon E5-2620 V4 | ||
Intel xeon e5-2623 v4 firmware | ||
Intel Xeon E5-2623 V4 | ||
Intel xeon e5-2628l v4 firmware | ||
Intel Xeon E5-2628L v4 | ||
Intel xeon e5-2630 v4 firmware | ||
Intel Xeon E5-2630 V4 | ||
Intel xeon e5-2630l v4 firmware | ||
Intel Xeon E5-2630L v4 | ||
Intel xeon e5-2637 v4 firmware | ||
Intel Xeon E5-2637 V4 | ||
Intel xeon e5-2640 v4 firmware | ||
Intel Xeon E5-2640 V4 | ||
Intel xeon e5-2643 v4 firmware | ||
Intel Xeon E5-2643 v4 | ||
Intel Xeon E5-2648L v4 | ||
Intel Xeon E5-2648L v4 | ||
Intel xeon e5-2650 v4 firmware | ||
Intel Xeon E5-2650 v4 | ||
Intel xeon e5-2650l v4 firmware | ||
Intel xeon e5-2650l v4 | ||
Intel xeon e5-2658 v4 firmware | ||
Intel xeon e5-2658 v4 | ||
Intel xeon e5-2660 v4 firmware | ||
Intel xeon e5-2660 v4 | ||
Intel xeon e5-2667 v4 firmware | ||
Intel xeon e5-2667 v4 | ||
Intel xeon e5-2679 v4 firmware | ||
Intel xeon e5-2679 v4 | ||
Intel xeon e5-2680 v4 firmware | ||
Intel xeon e5-2680 v4 | ||
Intel xeon e5-2683 v4 firmware | ||
Intel xeon e5-2683 v4 | ||
Intel xeon e5-2687w v4 firmware | ||
Intel xeon e5-2687w v4 | ||
Intel xeon e5-2689 v4 firmware | ||
Intel xeon e5-2689 v4 | ||
Intel xeon e5-2690 v4 firmware | ||
Intel xeon e5-2690 v4 | ||
Intel xeon e5-2695 v4 firmware | ||
Intel xeon e5-2695 v4 | ||
Intel xeon e5-2697 v4 firmware | ||
Intel xeon e5-2697 v4 | ||
Intel xeon e5-2697a v4 firmware | ||
Intel xeon e5-2697a v4 | ||
Intel xeon e5-2698 v4 firmware | ||
Intel xeon e5-2698 v4 | ||
Intel xeon e5-2699 v4 firmware | ||
Intel xeon e5-2699 v4 | ||
Intel xeon e5-2699a v4 firmware | ||
Intel xeon e5-2699a v4 | ||
Intel xeon e5-2699r v4 firmware | ||
Intel xeon e5-2699r v4 | ||
Intel xeon e5-4610 v4 firmware | ||
Intel xeon e5-4610 v4 | ||
Intel xeon e5-4610a v4 firmware | ||
Intel xeon e5-4610a v4 | ||
Intel xeon e5-4620 v4 firmware | ||
Intel xeon e5-4620 v4 | ||
Intel xeon e5-4627 v4 firmware | ||
Intel xeon e5-4627 v4 | ||
Intel xeon e5-4628l v4 firmware | ||
Intel xeon e5-4628l v4 | ||
Intel xeon e5-4640 v4 firmware | ||
Intel xeon e5-4640 v4 | ||
Intel xeon e5-4650 v4 firmware | ||
Intel xeon e5-4650 v4 | ||
Intel xeon e5-4655 v4 firmware | ||
Intel xeon e5-4655 v4 | ||
Intel xeon e5-4660 v4 firmware | ||
Intel xeon e5-4660 v4 | ||
Intel xeon e5-4667 v4 firmware | ||
Intel xeon e5-4667 v4 | ||
Intel xeon e5-4669 v4 firmware | ||
Intel xeon e5-4669 v4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-0190 has been rated as high severity due to its potential for privilege escalation by a privileged user.
To mitigate CVE-2021-0190, update the BIOS firmware of affected Intel processors to the latest version released by Intel.
CVE-2021-0190 affects firmware for Intel Core i9 and Xeon E5 processors.
CVE-2021-0190 requires local access to exploit, limiting its remote exploitation risk.
Exploitation of CVE-2021-0190 could allow an attacker to achieve privilege escalation on the affected system.