Intel confirms two local security issues that affect many Intel processor generations

guest · Nov 16, 2021

Intel confirms two local security issues that affect many Intel processor generations
November 16, 2021
https://www.ghacks.net/2021/11/15/i...that-affect-many-intel-processor-generations/

Intel published two security advisories for many of the company's processor generations this week. The vulnerabilities have received a severity rating of high, the second-highest after critical.

Good news is that the two issues require local access to be exploited. Bad news, that BIOS updates are required to address the issues.
Vulnerabilities CVE-2021-0157 and CVE-2021-0158 may allow escalation of privilege if successfully exploited. The vulnerabilities base score is 8.2, high.
Click to expand...

It seems strange that Intel processor generations 7, 10 and 11 are affected, but generations 8 and 9 are not.

The second vulnerability, CVE-2021-0146, may allow escalation of privilege as well. It too requires physical access for the attack. The base score of the vulnerability is 7.1, which is also high.
Intel provides the following description:

Hardware allows activation of test or debug logic at runtime for some Intel(R) processors which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Click to expand...

Resolution
Intel has released updates, but system manufacturers need to provide these to their customers. If the past is anything to go by, it is unlikely that older products will receive BIOS updates that address the issues.
Still, you may want to check the manufacturer's website regularly to find out if an update has been published.

Intel does not reveal additional details on the vulnerabilities. Whether setting a BIOS password is enough to block attacks from being carried out is unclear at this point.
Click to expand...

Log in or Sign up

Intel confirms two local security issues that affect many Intel processor generations

guest Guest

Log in or Sign up

Intel confirms two local security issues that affect many Intel processor generations

guest Guest

Useful Searches