{"id":"CVE-2021-0159","aliases":["EUVD-2021-2778","GHSA-695q-548v-ghxf"],"status":"published","title":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may...","description":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0027,"percentile":0.19265,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2022-05-12T16:36:13Z","modified":"2026-06-17T03:29:21Z","products":[{"vendor":"intel","product":"xeon_bronze_3204_firmware"},{"vendor":"intel","product":"xeon_bronze_3206r_firmware"},{"vendor":"intel","product":"xeon_gold_5215_firmware"},{"vendor":"intel","product":"xeon_gold_5215l_firmware"},{"vendor":"intel","product":"xeon_gold_5217_firmware"},{"vendor":"intel","product":"xeon_gold_5218_firmware"},{"vendor":"intel","product":"xeon_gold_5218b_firmware"},{"vendor":"intel","product":"xeon_gold_5218n_firmware"},{"vendor":"intel","product":"xeon_gold_5218r_firmware"},{"vendor":"intel","product":"xeon_gold_5218t_firmware"},{"vendor":"intel","product":"xeon_gold_5220_firmware"},{"vendor":"intel","product":"xeon_gold_5220r_firmware"},{"vendor":"intel","product":"xeon_gold_5220s_firmware"},{"vendor":"intel","product":"xeon_gold_5220t_firmware"},{"vendor":"intel","product":"xeon_gold_5222_firmware"},{"vendor":"intel","product":"xeon_gold_5315y_firmware"},{"vendor":"intel","product":"xeon_gold_5317_firmware"},{"vendor":"intel","product":"xeon_gold_5318h_firmware"},{"vendor":"intel","product":"xeon_gold_5318n_firmware"},{"vendor":"intel","product":"xeon_gold_5318s_firmware"},{"vendor":"intel","product":"xeon_gold_5318y_firmware"},{"vendor":"intel","product":"xeon_gold_5320_firmware"},{"vendor":"intel","product":"xeon_gold_5320h_firmware"},{"vendor":"intel","product":"xeon_gold_5320t_firmware"},{"vendor":"intel","product":"xeon_gold_6208u_firmware"},{"vendor":"intel","product":"xeon_gold_6209u_firmware"},{"vendor":"intel","product":"xeon_gold_6210u_firmware"},{"vendor":"intel","product":"xeon_gold_6212u_firmware"},{"vendor":"intel","product":"xeon_gold_6222v_firmware"},{"vendor":"intel","product":"xeon_gold_6226_firmware"},{"vendor":"intel","product":"xeon_gold_6226r_firmware"},{"vendor":"intel","product":"xeon_gold_6230_firmware"},{"vendor":"intel","product":"xeon_gold_6230n_firmware"},{"vendor":"intel","product":"xeon_gold_6230r_firmware"},{"vendor":"intel","product":"xeon_gold_6230t_firmware"},{"vendor":"intel","product":"xeon_gold_6234_firmware"},{"vendor":"intel","product":"xeon_gold_6238_firmware"},{"vendor":"intel","product":"xeon_gold_6238l_firmware"},{"vendor":"intel","product":"xeon_gold_6238r_firmware"},{"vendor":"intel","product":"xeon_gold_6238t_firmware"},{"vendor":"intel","product":"xeon_gold_6240_firmware"},{"vendor":"intel","product":"xeon_gold_6240l_firmware"},{"vendor":"intel","product":"xeon_gold_6240r_firmware"},{"vendor":"intel","product":"xeon_gold_6240y_firmware"},{"vendor":"intel","product":"xeon_gold_6242_firmware"},{"vendor":"intel","product":"xeon_gold_6242r_firmware"},{"vendor":"intel","product":"xeon_gold_6244_firmware"},{"vendor":"intel","product":"xeon_gold_6246_firmware"},{"vendor":"intel","product":"xeon_gold_6246r_firmware"},{"vendor":"intel","product":"xeon_gold_6248_firmware"},{"vendor":"intel","product":"xeon_gold_6248r_firmware"},{"vendor":"intel","product":"xeon_gold_6250_firmware"},{"vendor":"intel","product":"xeon_gold_6250l_firmware"},{"vendor":"intel","product":"xeon_gold_6252_firmware"},{"vendor":"intel","product":"xeon_gold_6252n_firmware"},{"vendor":"intel","product":"xeon_gold_6254_firmware"},{"vendor":"intel","product":"xeon_gold_6256_firmware"},{"vendor":"intel","product":"xeon_gold_6258r_firmware"},{"vendor":"intel","product":"xeon_gold_6262v_firmware"},{"vendor":"intel","product":"xeon_gold_6312u_firmware"},{"vendor":"intel","product":"xeon_gold_6314u_firmware"},{"vendor":"intel","product":"xeon_gold_6326_firmware"},{"vendor":"intel","product":"xeon_gold_6328h_firmware"},{"vendor":"intel","product":"xeon_gold_6328hl_firmware"},{"vendor":"intel","product":"xeon_gold_6330_firmware"},{"vendor":"intel","product":"xeon_gold_6330h_firmware"},{"vendor":"intel","product":"xeon_gold_6330n_firmware"},{"vendor":"intel","product":"xeon_gold_6334_firmware"},{"vendor":"intel","product":"xeon_gold_6336y_firmware"},{"vendor":"intel","product":"xeon_gold_6338_firmware"},{"vendor":"intel","product":"xeon_gold_6338n_firmware"},{"vendor":"intel","product":"xeon_gold_6338t_firmware"},{"vendor":"intel","product":"xeon_gold_6342_firmware"},{"vendor":"intel","product":"xeon_gold_6346_firmware"},{"vendor":"intel","product":"xeon_gold_6348_firmware"},{"vendor":"intel","product":"xeon_gold_6348h_firmware"},{"vendor":"intel","product":"xeon_gold_6354_firmware"},{"vendor":"intel","product":"xeon_platinum_8253_firmware"},{"vendor":"intel","product":"xeon_platinum_8256_firmware"},{"vendor":"intel","product":"xeon_platinum_8260_firmware"},{"vendor":"intel","product":"xeon_platinum_8260l_firmware"},{"vendor":"intel","product":"xeon_platinum_8260y_firmware"},{"vendor":"intel","product":"xeon_platinum_8268_firmware"},{"vendor":"intel","product":"xeon_platinum_8270_firmware"},{"vendor":"intel","product":"xeon_platinum_8276_firmware"},{"vendor":"intel","product":"xeon_platinum_8276l_firmware"},{"vendor":"intel","product":"xeon_platinum_8280_firmware"},{"vendor":"intel","product":"xeon_platinum_8280l_firmware"},{"vendor":"intel","product":"xeon_platinum_8351n_firmware"},{"vendor":"intel","product":"xeon_platinum_8352m_firmware"},{"vendor":"intel","product":"xeon_platinum_8352s_firmware"},{"vendor":"intel","product":"xeon_platinum_8352v_firmware"},{"vendor":"intel","product":"xeon_platinum_8352y_firmware"},{"vendor":"intel","product":"xeon_platinum_8353h_firmware"},{"vendor":"intel","product":"xeon_platinum_8354h_firmware"},{"vendor":"intel","product":"xeon_platinum_8356h_firmware"},{"vendor":"intel","product":"xeon_platinum_8358_firmware"},{"vendor":"intel","product":"xeon_platinum_8358p_firmware"},{"vendor":"intel","product":"xeon_platinum_8360h_firmware"},{"vendor":"intel","product":"xeon_platinum_8360hl_firmware"},{"vendor":"intel","product":"xeon_platinum_8360y_firmware"},{"vendor":"intel","product":"xeon_platinum_8362_firmware"},{"vendor":"intel","product":"xeon_platinum_8368_firmware"},{"vendor":"intel","product":"xeon_platinum_8368q_firmware"},{"vendor":"intel","product":"xeon_platinum_8376h_firmware"},{"vendor":"intel","product":"xeon_platinum_8376hl_firmware"},{"vendor":"intel","product":"xeon_platinum_8380_firmware"},{"vendor":"intel","product":"xeon_platinum_8380h_firmware"},{"vendor":"intel","product":"xeon_platinum_8380hl_firmware"},{"vendor":"intel","product":"xeon_platinum_9221_firmware"},{"vendor":"intel","product":"xeon_platinum_9222_firmware"},{"vendor":"intel","product":"xeon_platinum_9242_firmware"},{"vendor":"intel","product":"xeon_platinum_9282_firmware"},{"vendor":"intel","product":"xeon_silver_4208_firmware"},{"vendor":"intel","product":"xeon_silver_4209t_firmware"},{"vendor":"intel","product":"xeon_silver_4210_firmware"},{"vendor":"intel","product":"xeon_silver_4210r_firmware"},{"vendor":"intel","product":"xeon_silver_4210t_firmware"},{"vendor":"intel","product":"xeon_silver_4214_firmware"},{"vendor":"intel","product":"xeon_silver_4214r_firmware"},{"vendor":"intel","product":"xeon_silver_4214y_firmware"},{"vendor":"intel","product":"xeon_silver_4215_firmware"},{"vendor":"intel","product":"xeon_silver_4215r_firmware"},{"vendor":"intel","product":"xeon_silver_4216_firmware"},{"vendor":"intel","product":"xeon_silver_4309y_firmware"},{"vendor":"intel","product":"xeon_silver_4310_firmware"},{"vendor":"intel","product":"xeon_silver_4310t_firmware"},{"vendor":"intel","product":"xeon_silver_4314_firmware"},{"vendor":"intel","product":"xeon_silver_4316_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20220818-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-0159"},{"url":"https://security.netapp.com/advisory/ntap-20220818-0003"},{"url":"https://github.com/advisories/GHSA-695q-548v-ghxf"}],"sources":{"cve":[{"id":"CVE-2021-0159","description":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.","status":"published","published":"2022-05-12T16:36:13Z","modified":"2025-05-05T16:59:09.613Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:33:10.555814Z"}],"euvd":[{"id":"EUVD-2021-2778","description":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.","status":"published","published":"2022-05-12T16:36:13Z","modified":"2025-05-05T16:59:09Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-695q-548v-ghxf","title":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may...","description":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.","status":"published","published":"2022-05-13T00:00:45Z","modified":"2025-05-05T18:32:49Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:02:07.480076Z"}],"nvd":[{"id":"CVE-2021-0159","description":"Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.","status":"published","published":"2022-05-12T17:15:08.557Z","modified":"2026-06-17T03:29:21.813Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:07:06.029737Z"}]}}