← Vulnerability feed

Vulnerability record · CVE-2021-0187 · published 16 February 2023

CVE-2021-0187: Intel xeon gold 6342 firmware vulnerability

Intel · Xeon Gold 6342 Firmware

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

8.2 CVSS 3.1 High EPSS 0.21% · top 89.3%
8.2CVSS 3.1 base score
0.21%EPSS exploitation probability, 30 days
NoNot in CISA KEV
53Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Affected products

53 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html Vendor Advisory

Track CVE-2021-0187 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-33060Intel xeon gold 5315y firmware out-of-bounds write vulnerabilityOut-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege v…EPSS 0.26%7.8CVE-2021-0159Intel xeon bronze 3204 firmware improper input validation vulnerabilityImproper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescal…EPSS 0.27%7.0CVE-2022-26837Intel xeon gold 5317 firmware improper input validation vulnerabilityImproper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege…EPSS 0.22%6.8CVE-2022-21216Intel xeon gold 5315y firmware vulnerabilityInsufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged …EPSS 0.54%6.7CVE-2022-41804Debian linux vulnerabilityUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable e…EPSS 0.27%6.7CVE-2022-33196Intel xeon gold 5315y firmware incorrect default permissions vulnerabilityIncorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extens…EPSS 0.21%6.7CVE-2022-32231Intel xeon gold 6138p firmware vulnerabilityImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege v…EPSS 0.21%6.7CVE-2022-30539Intel xeon gold 5315y firmware use after free vulnerabilityUse after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local …EPSS 0.21%

Source: NIST National Vulnerability Database (record CVE-2021-0187), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.