CVE-2021-0126

CVSS 8 HIGHEPSS 0.4%CWE-20

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 May 2022Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · Intel(R) Manageability Commander

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00519.html