What is CVE-2021-0157?

CVE-2021-0157 is a medium-severity vulnerability in Intel Celeron_n2805. CVSS score: 6.7/10. Published 2021-11-17.

How severe is CVE-2021-0157?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Is CVE-2021-0157 known to be exploited?

4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Intel Celeron_n2805

CVE-2021-0157

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

EPSS: 0.031 (86.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Intel Celeron_n2805
Intel Celeron_n2806
Intel Celeron_n2807
Intel Celeron_n2808
Intel Celeron_n2810
Intel Celeron_n2815
Intel Celeron_n2820
Intel Celeron_n2830
Intel Celeron_n2840
Intel Celeron_n2910

Public proof-of-concept exploits

ARPSyndicate/cve-scores
liba2k/Insomni-Hack-2022
sh7alward/Nightmare-
song856854132/scrapy_

References

secure@intel.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-0157?: CVE-2021-0157 is a medium-severity vulnerability in Intel Celeron_n2805. CVSS score: 6.7/10. Published 2021-11-17.
How severe is CVE-2021-0157?: Medium severity. CVSS v3 base score is 6.7 out of 10.
Is CVE-2021-0157 known to be exploited?: 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.