Vulnerability record · CVE-2021-0145 · published 9 February 2022

CVE-2021-0145: Netapp fas\/aff bios vulnerability

NNetapp · Fas\/Aff Bios

Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

5.5 CVSS 3.1 Medium EPSS 0.33% · top 76.5% CWE-665 · CWE-665

5.5CVSS 3.1 base score, v2 2.1

0.33%EPSS exploitation probability, 30 days

NoNot in CISA KEV

121Affected product versions listed by NVD

4References

17 Jun 2026Last modified by NVD

Description

Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

121 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Celeron 6305 Intel

Celeron 6305e Intel

Celeron 6600he Intel

Core I3 1000g1 Intel

Core I3 1000g4 Intel

Core I3 1005g1 Intel

Core I3 11100he Intel

Core I3 1110g4 Intel

Core I3 1115g4 Intel

Core I3 1115g4e Intel

Core I3 1115gre Intel

Core I3 1120g4 Intel

Core I3 1125g4 Intel

Core I5 1030g4 Intel

Core I5 1030g7 Intel

Core I5 1035g1 Intel

Core I5 1035g4 Intel

Core I5 1035g7 Intel

Core I5 11260h Intel

Core I5 11300h Intel

Core I5 1130g7 Intel

Core I5 11320h Intel

Core I5 1135g7 Intel

Core I5 11400 Intel

Core I5 11400f Intel

Core I5 11400h Intel

Core I5 11400t Intel

Core I5 1140g7 Intel

Core I5 1145g7 Intel

Core I5 1145g7e Intel

Core I5 1145gre Intel

Core I5 11500 Intel

Core I5 11500h Intel

Core I5 11500t Intel

Core I5 1155g7 Intel

Core I5 11600 Intel

Core I5 11600k Intel

Core I5 11600kf Intel

Core I5 11600t Intel

Core I7 1060g7 Intel

Core I7 1065g7 Intel

Core I7 11370h Intel

Core I7 11375h Intel

Core I7 11390h Intel

Core I7 1160g7 Intel

Core I7 1165g7 Intel

Core I7 11700 Intel

Core I7 11700f Intel

Core I7 11700k Intel

Core I7 11700kf Intel

Core I7 11700t Intel

Core I7 11800h Intel

Core I7 1180g7 Intel

Core I7 11850h Intel

Core I7 11850he Intel

Core I7 1185g7 Intel

Core I7 1185g7e Intel

Core I7 1185gre Intel

Core I7 1195g7 Intel

Core I9 11900 Intel

Core I9 11900f Intel

Core I9 11900h Intel

Core I9 11900k Intel

Core I9 11900kf Intel

Core I9 11900t Intel

Core I9 11950h Intel

Core I9 11980hk Intel

Pentium Gold 7505 Intel

Xeon E 2314 Intel

Xeon E 2324g Intel

Xeon E 2334 Intel

Xeon E 2336 Intel

Xeon E 2356g Intel

Xeon E 2374g Intel

Xeon E 2378 Intel

Xeon E 2378g Intel

Xeon E 2386g Intel

Xeon E 2388g Intel

Xeon Gold 5300 Intel

Xeon Gold 6300 Intel

References

Link	Tags
https://security.netapp.com/advisory/ntap-20220210-0009/	Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00561.html	Vendor Advisory
https://security.netapp.com/advisory/ntap-20220210-0009/	Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00561.html	Vendor Advisory

Track CVE-2021-0145 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2020-24489Intel atom x5-e3930 vulnerabilityIncomplete cleanup in some Intel(R) VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access.EPSS 0.35%9 Jun 2021 7.8CVE-2021-0099Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation…EPSS 0.30%9 Feb 2022 7.8CVE-2021-0091Intel atom c3308 vulnerabilityImproper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privile…EPSS 0.33%9 Feb 2022 6.8CVE-2021-33150Intel atom c2308 vulnerabilityHardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potenti…EPSS 0.35%11 Mar 2022 6.7CVE-2021-0115Intel atom c3308 classic buffer overflow vulnerabilityBuffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acce…EPSS 0.33%9 Feb 2022 6.7CVE-2021-0111Intel atom c3308 null pointer dereference vulnerabilityNULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege vi…EPSS 0.30%9 Feb 2022 6.7CVE-2021-0103Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of …EPSS 0.30%9 Feb 2022 6.7CVE-2021-0107Intel atom c3308 unchecked return value vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via loc…EPSS 0.30%9 Feb 2022

Source: NIST National Vulnerability Database (record CVE-2021-0145), CISA KEV, FIRST EPSS (scores of 2026-10-08). This page is refreshed as NVD updates the record.