CVE-2021-0060
Medium
Description
Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0, SPS_SoC-X_03.00.03.117.0, IGN_E5_91.00.00.167.0, SPS_PHI_03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.
SeverityMedium
CVSS6.6
Exploit probability—
ProductIntel C620a Series Firmware
PublishedFeb 9, 2022
First seenFeb 9, 2022
How to fix
Update
- intel c620a_series_firmwaresps_e5_04.04.03.281.0 or later
- intel c620_series_firmwaresps_e5_04.01.04.516.0 or later
- intel c240_series_firmwaresps_e3_05.01.04.309.0 or later
- intel atom_p5000_series_firmwaresps_soc-a_05.00.03.114.0 or later
- intel atom_c3000_series_firmwaresps_soc-a_04.00.04.501.0 or later
- intel atom_c610_series_firmwaresps_phi_03.01.03.078.0 or later
- intel xeon_d-1500_series_firmwaresps_soc-x_03.00.03.117.0 or later
- intel xeon_d_2000_series_firmwaresps_phi_03.01.03.078.0 or later
- intel 11th_generation_core_series_firmwarecsme_15.0.35 or later
- intel xeon_w-1300_series_firmwarecsme_15.0.35 or later
- intel pentium_gold_series_firmwarecsme_15.0.35 or later
- intel celeron_6000_series_firmwarecsme_15.0.35 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel c620a_series_firmware | v < sps_e5_04.04.03.281.0 | sps_e5_04.04.03.281.0 |
| intel c620_series_firmware | v < sps_e5_04.01.04.516.0 | sps_e5_04.01.04.516.0 |
| intel c240_series_firmware | v < sps_e3_05.01.04.309.0 | sps_e3_05.01.04.309.0 |
| intel atom_p5000_series_firmware | v < sps_soc-a_05.00.03.114.0 | sps_soc-a_05.00.03.114.0 |
| intel atom_c3000_series_firmware | v < sps_soc-a_04.00.04.501.0 | sps_soc-a_04.00.04.501.0 |
| intel atom_c610_series_firmware | v < sps_phi_03.01.03.078.0 | sps_phi_03.01.03.078.0 |
| intel xeon_d-1500_series_firmware | v < sps_soc-x_03.00.03.117.0 | sps_soc-x_03.00.03.117.0 |
| intel xeon_d_2000_series_firmware | v < sps_phi_03.01.03.078.0 | sps_phi_03.01.03.078.0 |
| intel 11th_generation_core_series_firmware | v < csme_15.0.35 | csme_15.0.35 |
| intel xeon_w-1300_series_firmware | v < csme_15.0.35 | csme_15.0.35 |
| intel pentium_gold_series_firmware | v < csme_15.0.35 | csme_15.0.35 |
| intel celeron_6000_series_firmware | v < csme_15.0.35 | csme_15.0.35 |
| netapp cloud_backup | No range specified | — |
| netapp hci_compute_node_bios | No range specified | — |
| netapp hci_storage_node_bios | No range specified | — |
| netapp solidfire_bios | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.