Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-0054

Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.

Security Impact Summary

This vulnerability carries a MEDIUM severity rating with a CVSS v3.1 score of 6.7, requiring local system access to exploit with relatively low complexity without requiring user interaction . The vulnerability impacts confidentiality (data exposure), integrity (unauthorized modifications), and availability (service disruption) for affected systems. Impacting 154 products from intel, from intel, from intel and 151 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

Reported in 2021, this vulnerability emerged during an era marked by increased sophistication in supply chain attacks, cloud infrastructure vulnerabilities, and software-as-a-service (SaaS) security challenges. Security practices during this period emphasized zero-trust architectures, container security, and API protection.

Published

2021-06-09T20:15:08.267

Last Modified

2024-11-21T05:41:44.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

3.9

Impact Score

6.4

Weaknesses

Type: Primary
CWE-119

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	intel	nuc_m15_laptop_kit_lapbc510_firmware	< bctgl357.0051	Yes
Hardware	intel	nuc_m15_laptop_kit_lapbc510	-	No
Operating System	intel	nuc_m15_laptop_kit_lapbc710_firmware	< bctgl357.0051	Yes
Hardware	intel	nuc_m15_laptop_kit_lapbc710	-	No
Operating System	intel	nuc_11_compute_element_cm11ebc4_firmware	< ebtgl357.0045	Yes
Hardware	intel	nuc_11_compute_element_cm11ebc4	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi38w_firmware	< ebtgl357.0045	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi38w	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi58w_firmware	< ebtgl357.0045	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi58w	-	No
Operating System	intel	nuc_11_compute_element_cm11ebi716w_firmware	< ebtgl357.0045	Yes
Hardware	intel	nuc_11_compute_element_cm11ebi716w	-	No
Operating System	intel	nuc_11_performance_kit_nuc11pahi3_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11pahi3	-	No
Operating System	intel	nuc_11_performance_kit_nuc11pahi5_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11pahi5	-	No
Operating System	intel	nuc_11_performance_kit_nuc11pahi7_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11pahi7	-	No
Operating System	intel	nuc_11_performance_kit_nuc11paki3_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11paki3	-	No
Operating System	intel	nuc_11_performance_kit_nuc11paki5_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11paki5	-	No
Operating System	intel	nuc_11_performance_kit_nuc11paki7_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_kit_nuc11paki7	-	No
Operating System	intel	nuc_11_performance_mini_pc_nuc11paqi50wa_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_mini_pc_nuc11paqi50wa	-	No
Operating System	intel	nuc_11_performance_mini_pc_nuc11paqi70qa_firmware	< patgl357.0037	Yes
Hardware	intel	nuc_11_performance_mini_pc_nuc11paqi70qa	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi3_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi3	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi5_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi5	-	No
Operating System	intel	nuc_11_pro_board_nuc11tnbi7_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_board_nuc11tnbi7	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi3_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi3	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi30l_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi30l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi30p_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi30p	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi5_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi5	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi50l_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi50l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi50w_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi50w	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi7_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi7	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi70l_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi70l	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnhi70q_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnhi70q	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki3_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki3	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki5_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki5	-	No
Operating System	intel	nuc_11_pro_kit_nuc11tnki7_firmware	< tntgl357.0052	Yes
Hardware	intel	nuc_11_pro_kit_nuc11tnki7	-	No
Operating System	intel	nuc_11_enthusiast_kit_nuc11phki7c_firmware	< phtgl579.0056	Yes
Hardware	intel	nuc_11_enthusiast_kit_nuc11phki7c	-	No
Operating System	intel	nuc_11_enthusiast_mini_pc_nuc11phki7caa_firmware	< phtgl579.0056	Yes
Hardware	intel	nuc_11_enthusiast_mini_pc_nuc11phki7caa	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnh_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnhf_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnhf	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i3fnk_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i3fnk	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnh_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnhf_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnhf	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnhj_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnhj	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnk_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnk	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i5fnkp_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i5fnkp	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnh_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnh	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnhc_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnhc	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnk_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnk	-	No
Operating System	intel	nuc_10_performance_kit_nuc10i7fnkp_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_kit_nuc10i7fnkp	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i3fnhfa_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i3fnhfa	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i3fnhja_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i3fnhja	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnhca_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnhca	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnhja_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnhja	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i5fnkpa_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i5fnkpa	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnhaa_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnhaa	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnhja_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnhja	-	No
Operating System	intel	nuc_10_performance_mini_pc_nuc10i7fnkpa_firmware	< fncml.0050	Yes
Hardware	intel	nuc_10_performance_mini_pc_nuc10i7fnkpa	-	No
Operating System	intel	nuc_9_pro_compute_element_nuc9v7qnb_firmware	< qncflx70.0059	Yes
Hardware	intel	nuc_9_pro_compute_element_nuc9v7qnb	-	No
Operating System	intel	nuc_9_pro_compute_element_nuc9vxqnb_firmware	< qncflx70.0059	Yes
Hardware	intel	nuc_9_pro_compute_element_nuc9vxqnb	-	No
Operating System	intel	nuc_9_pro_kit_nuc9v7qnx_firmware	< qncflx70.0059	Yes
Hardware	intel	nuc_9_pro_kit_nuc9v7qnx	-	No
Operating System	intel	nuc_9_pro_kit_nuc9vxqnx_firmware	< qncflx70.0059	Yes
Hardware	intel	nuc_9_pro_kit_nuc9vxqnx	-	No
Operating System	intel	nuc_8_business\,_a_mini_pc_with_windows_10_nuc8i7hnkqc_firmware	< hnkbli70.86a.0065	Yes
Hardware	intel	nuc_8_business\,_a_mini_pc_with_windows_10_nuc8i7hnkqc	-	No
Operating System	intel	nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkva_firmware	< hnkbli70.86a.0065	Yes
Hardware	intel	nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkva	-	No
Operating System	intel	nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkvaw_firmware	< hnkbli70.86a.0065	Yes
Hardware	intel	nuc_8_enthusiast\,_a_mini_pc_with_windows_10_nuc8i7hvkvaw	-	No
Operating System	intel	nuc_kit_nuc8i7hnk_firmware	< hnkbli70.86a.0065	Yes
Hardware	intel	nuc_kit_nuc8i7hnk	-	No
Operating System	intel	nuc_kit_nuc8i7hvk_firmware	< hnkbli70.86a.0065	Yes
Hardware	intel	nuc_kit_nuc8i7hvk	-	No
Operating System	intel	nuc_8_rugged_kit_nuc8cchkr_firmware	< chaplcel.0051	Yes
Hardware	intel	nuc_8_rugged_kit_nuc8cchkr	-	No
Operating System	intel	nuc_board_nuc8cchb_firmware	< chaplcel.0051	Yes
Hardware	intel	nuc_board_nuc8cchb	-	No
Operating System	intel	nuc_8_compute_element_cm8ccb_firmware	< cbwhl.0092	Yes
Hardware	intel	nuc_8_compute_element_cm8ccb	-	No
Operating System	intel	nuc_8_compute_element_cm8i3cb_firmware	< cbwhl.0092	Yes
Hardware	intel	nuc_8_compute_element_cm8i3cb	-	No
Operating System	intel	nuc_8_compute_element_cm8i5cb_firmware	< cbwhl.0092	Yes
Hardware	intel	nuc_8_compute_element_cm8i5cb	-	No
Operating System	intel	nuc_8_compute_element_cm8i7cb_firmware	< cbwhl.0092	Yes
Hardware	intel	nuc_8_compute_element_cm8i7cb	-	No
Operating System	intel	nuc_8_compute_element_cm8pcb_firmware	< cbwhl.0092	Yes
Hardware	intel	nuc_8_compute_element_cm8pcb	-	No
Operating System	intel	nuc_8_pro_board_nuc8i3pnb_firmware	< pnwhl357.0039	Yes
Hardware	intel	nuc_8_pro_board_nuc8i3pnb	-	No
Operating System	intel	nuc_8_pro_kit_nuc8i3pnh_firmware	< pnwhl357.0039	Yes
Hardware	intel	nuc_8_pro_kit_nuc8i3pnh	-	No
Operating System	intel	nuc_8_pro_kit_nuc8i3pnk_firmware	< pnwhl357.0039	Yes
Hardware	intel	nuc_8_pro_kit_nuc8i3pnk	-	No
Operating System	intel	nuc_8_mainstream-g_kit_nuc8i5inh_firmware	< inwhl357.0040	Yes
Hardware	intel	nuc_8_mainstream-g_kit_nuc8i5inh	-	No
Operating System	intel	nuc_8_mainstream-g_kit_nuc8i7inh_firmware	< inwhl357.0040	Yes
Hardware	intel	nuc_8_mainstream-g_kit_nuc8i7inh	-	No
Operating System	intel	nuc_8_mainstream-g_mini_pc_nuc8i5inh_firmware	< inwhl357.0040	Yes
Hardware	intel	nuc_8_mainstream-g_mini_pc_nuc8i5inh	-	No
Operating System	intel	nuc_8_mainstream-g_mini_pc_nuc8i7inh_firmware	< inwhl357.0040	Yes
Hardware	intel	nuc_8_mainstream-g_mini_pc_nuc8i7inh	-	No
Operating System	intel	nuc_7_essential\,_a_mini_pc_with_windows_10_nuc7cjysal_firmware	< jyglkcpx.86a.0057	Yes
Hardware	intel	nuc_7_essential\,_a_mini_pc_with_windows_10_nuc7cjysal	-	No
Operating System	intel	nuc_kit_nuc7cjyh_firmware	< jyglkcpx.86a.0057	Yes
Hardware	intel	nuc_kit_nuc7cjyh	-	No
Operating System	intel	nuc_kit_nuc7pjyh_firmware	< jyglkcpx.86a.0057	Yes
Hardware	intel	nuc_kit_nuc7pjyh	-	No

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00511.html Patch, Vendor Advisory ([email protected])
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00511.html Patch, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For intel's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.