Vulnerability record · CVE-2021-0144 · published 14 July 2021

CVE-2021-0144: Intel atom c3000 insecure default initialization vulnerability

Intel · Atom C3000

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.

6.7 CVSS 3.1 Medium EPSS 0.33% · top 76.8% CWE-1188 · Insecure default initialization

6.7CVSS 3.1 base score, v2 7.2

0.33%EPSS exploitation probability, 30 days

NoNot in CISA KEV

150Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Atom C3000 Intel

Atom C3308 Intel

Atom C3336 Intel

Atom C3338 Intel

Atom C3338r Intel

Atom C3436l Intel

Atom C3508 Intel

Atom C3538 Intel

Atom C3558 Intel

Atom C3558r Intel

Atom C3558rc Intel

Atom C3708 Intel

Atom C3750 Intel

Atom C3758 Intel

Atom C3758r Intel

Atom C3808 Intel

Atom C3830 Intel

Atom C3850 Intel

Atom C3858 Intel

Atom C3950 Intel

Atom C3955 Intel

Atom C3958 Intel

Core I3 6006u Intel

Core I3 6098p Intel

Core I3 6100 Intel

Core I3 6100e Intel

Core I3 6100h Intel

Core I3 6100t Intel

Core I3 6100te Intel

Core I3 6100u Intel

Core I3 6102e Intel

Core I3 6110u Intel

Core I3 6120 Intel

Core I3 6120t Intel

Core I3 6157u Intel

Core I3 6167u Intel

Core I3 6300 Intel

Core I3 6300t Intel

Core I3 6320 Intel

Core I3 6320t Intel

Core I3 7007u Intel

Core I3 7020u Intel

Core I3 7100 Intel

Core I3 7100e Intel

Core I3 7100h Intel

Core I3 7100t Intel

Core I3 7100u Intel

Core I3 7101e Intel

Core I3 7101te Intel

Core I3 7102e Intel

Core I3 7110u Intel

Core I3 7120 Intel

Core I3 7120t Intel

Core I3 7130u Intel

Core I3 7167u Intel

Core I3 7300 Intel

Core I3 7300t Intel

Core I3 7320 Intel

Core I3 7320t Intel

Core I3 7340 Intel

Core I3 7350k Intel

Core I3 7367u Intel

Core I3 8000 Intel

Core I3 8000t Intel

Core I3 8020 Intel

Core I3 8100 Intel

Core I3 8100b Intel

Core I3 8100h Intel

Core I3 8100t Intel

Core I3 8109u Intel

Core I3 8120 Intel

Core I3 8121u Intel

Core I3 8130u Intel

Core I3 8140u Intel

Core I3 8145u Intel

Core I3 8145ue Intel

Core I3 8300 Intel

Core I3 8300t Intel

Core I3 8350k Intel

Core I3 9100 Intel

References

Link	Tags
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00525.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00525.html	Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00527.html	Vendor Advisory

Track CVE-2021-0144 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-0091Intel atom c3308 vulnerabilityImproper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privile…EPSS 0.33%9 Feb 2022 7.8CVE-2021-0099Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation…EPSS 0.30%9 Feb 2022 6.8CVE-2021-33150Intel atom c2308 vulnerabilityHardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potenti…EPSS 0.35%11 Mar 2022 6.7CVE-2021-0115Intel atom c3308 classic buffer overflow vulnerabilityBuffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acce…EPSS 0.33%9 Feb 2022 6.7CVE-2021-0103Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of …EPSS 0.30%9 Feb 2022 6.7CVE-2021-0107Intel atom c3308 unchecked return value vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via loc…EPSS 0.30%9 Feb 2022 6.7CVE-2021-0111Intel atom c3308 null pointer dereference vulnerabilityNULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege vi…EPSS 0.30%9 Feb 2022 6.7CVE-2021-0114Intel atom c3000 insecure default initialization vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via …EPSS 0.27%16 Aug 2021

Source: NIST National Vulnerability Database (record CVE-2021-0144), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.