Intel CPU vulnerabilities CVE-2021-0107 and CVE-2021-0111

• CVE-2021-0107

Unchecked return value in the firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access.

• CVE-2021-0111

NULL pointer dereference in the firmware for some Intel® Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

Impact

An attacker may be able to exploit the Intel processor firmware to gain elevated access to resources. The following platforms are vulnerable:

• VELOS CX410
• VELOS BX110 Blade

For more information, refer to Hardware Knowledge Centers.