CVE-2021-0054
Medium
Description
Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityMedium
CVSS6.7
Exploit probability—
ProductIntel Nuc M15 Laptop Kit Lapbc510 Firmware
PublishedJun 9, 2021
First seenJun 9, 2021
How to fix
Update
- intel nuc_m15_laptop_kit_lapbc510_firmwarebctgl357.0051 or later
- intel nuc_m15_laptop_kit_lapbc710_firmwarebctgl357.0051 or later
- intel nuc_11_compute_element_cm11ebc4_firmwareebtgl357.0045 or later
- intel nuc_11_compute_element_cm11ebi38w_firmwareebtgl357.0045 or later
- intel nuc_11_compute_element_cm11ebi58w_firmwareebtgl357.0045 or later
- intel nuc_11_compute_element_cm11ebi716w_firmwareebtgl357.0045 or later
- intel nuc_11_performance_kit_nuc11pahi3_firmwarepatgl357.0037 or later
- intel nuc_11_performance_kit_nuc11pahi5_firmwarepatgl357.0037 or later
- intel nuc_11_performance_kit_nuc11pahi7_firmwarepatgl357.0037 or later
- intel nuc_11_performance_kit_nuc11paki3_firmwarepatgl357.0037 or later
- intel nuc_11_performance_kit_nuc11paki5_firmwarepatgl357.0037 or later
- intel nuc_11_performance_kit_nuc11paki7_firmwarepatgl357.0037 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel nuc_m15_laptop_kit_lapbc510_firmware | v < bctgl357.0051 | bctgl357.0051 |
| intel nuc_m15_laptop_kit_lapbc710_firmware | v < bctgl357.0051 | bctgl357.0051 |
| intel nuc_11_compute_element_cm11ebc4_firmware | v < ebtgl357.0045 | ebtgl357.0045 |
| intel nuc_11_compute_element_cm11ebi38w_firmware | v < ebtgl357.0045 | ebtgl357.0045 |
| intel nuc_11_compute_element_cm11ebi58w_firmware | v < ebtgl357.0045 | ebtgl357.0045 |
| intel nuc_11_compute_element_cm11ebi716w_firmware | v < ebtgl357.0045 | ebtgl357.0045 |
| intel nuc_11_performance_kit_nuc11pahi3_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_kit_nuc11pahi5_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_kit_nuc11pahi7_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_kit_nuc11paki3_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_kit_nuc11paki5_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_kit_nuc11paki7_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_mini_pc_nuc11paqi50wa_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_performance_mini_pc_nuc11paqi70qa_firmware | v < patgl357.0037 | patgl357.0037 |
| intel nuc_11_pro_board_nuc11tnbi3_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_board_nuc11tnbi5_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_board_nuc11tnbi7_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi3_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi30l_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi30p_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi5_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi50l_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi50w_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi7_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi70l_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnhi70q_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnki3_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnki5_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_pro_kit_nuc11tnki7_firmware | v < tntgl357.0052 | tntgl357.0052 |
| intel nuc_11_enthusiast_kit_nuc11phki7c_firmware | v < phtgl579.0056 | phtgl579.0056 |
| intel nuc_11_enthusiast_mini_pc_nuc11phki7caa_firmware | v < phtgl579.0056 | phtgl579.0056 |
| intel nuc_10_performance_kit_nuc10i3fnh_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i3fnhf_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i3fnk_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i5fnh_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i5fnhf_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i5fnhj_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i5fnk_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i5fnkp_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i7fnh_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i7fnhc_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i7fnk_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_kit_nuc10i7fnkp_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i3fnhfa_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i3fnhja_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i5fnhca_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i5fnhja_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i5fnkpa_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i7fnhaa_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i7fnhja_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_10_performance_mini_pc_nuc10i7fnkpa_firmware | v < fncml.0050 | fncml.0050 |
| intel nuc_9_pro_compute_element_nuc9v7qnb_firmware | v < qncflx70.0059 | qncflx70.0059 |
| intel nuc_9_pro_compute_element_nuc9vxqnb_firmware | v < qncflx70.0059 | qncflx70.0059 |
| intel nuc_9_pro_kit_nuc9v7qnx_firmware | v < qncflx70.0059 | qncflx70.0059 |
| intel nuc_9_pro_kit_nuc9vxqnx_firmware | v < qncflx70.0059 | qncflx70.0059 |
| intel nuc_8_business\,_a_mini_pc_with_windows_10_nuc8i7hnkqc_firmware | v < hnkbli70.86a.0065 | hnkbli70.86a.0065 |
| intel nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkva_firmware | v < hnkbli70.86a.0065 | hnkbli70.86a.0065 |
| intel nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkvaw_firmware | v < hnkbli70.86a.0065 | hnkbli70.86a.0065 |
| intel nuc_kit_nuc8i7hnk_firmware | v < hnkbli70.86a.0065 | hnkbli70.86a.0065 |
| intel nuc_kit_nuc8i7hvk_firmware | v < hnkbli70.86a.0065 | hnkbli70.86a.0065 |
| intel nuc_8_rugged_kit_nuc8cchkr_firmware | v < chaplcel.0051 | chaplcel.0051 |
| intel nuc_board_nuc8cchb_firmware | v < chaplcel.0051 | chaplcel.0051 |
| intel nuc_8_compute_element_cm8ccb_firmware | v < cbwhl.0092 | cbwhl.0092 |
| intel nuc_8_compute_element_cm8i3cb_firmware | v < cbwhl.0092 | cbwhl.0092 |
| intel nuc_8_compute_element_cm8i5cb_firmware | v < cbwhl.0092 | cbwhl.0092 |
| intel nuc_8_compute_element_cm8i7cb_firmware | v < cbwhl.0092 | cbwhl.0092 |
| intel nuc_8_compute_element_cm8pcb_firmware | v < cbwhl.0092 | cbwhl.0092 |
| intel nuc_8_pro_board_nuc8i3pnb_firmware | v < pnwhl357.0039 | pnwhl357.0039 |
| intel nuc_8_pro_kit_nuc8i3pnh_firmware | v < pnwhl357.0039 | pnwhl357.0039 |
| intel nuc_8_pro_kit_nuc8i3pnk_firmware | v < pnwhl357.0039 | pnwhl357.0039 |
| intel nuc_8_mainstream-g_kit_nuc8i5inh_firmware | v < inwhl357.0040 | inwhl357.0040 |
| intel nuc_8_mainstream-g_kit_nuc8i7inh_firmware | v < inwhl357.0040 | inwhl357.0040 |
| intel nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware | v < inwhl357.0040 | inwhl357.0040 |
| intel nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware | v < inwhl357.0040 | inwhl357.0040 |
| intel nuc_7_essential\,_a_mini_pc_with_windows_10_nuc7cjysal_firmware | v < jyglkcpx.86a.0057 | jyglkcpx.86a.0057 |
| intel nuc_kit_nuc7cjyh_firmware | v < jyglkcpx.86a.0057 | jyglkcpx.86a.0057 |
| intel nuc_kit_nuc7pjyh_firmware | v < jyglkcpx.86a.0057 | jyglkcpx.86a.0057 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.