July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs
60
CVE-2021-0144
—CVSS 3.1
6.7 medium
EPSS
<1%p26
Published
()
Modified
Description
Insecure default variable initialization for the Intel BSSA DFT feature may allow a privileged user to potentially enable an escalation of privilege via local access.
- Vendors
- intel
- Products
- atom c3000, atom c3308, atom c3336, atom c3338, atom c3338r, atom c3436l, atom c3508, atom c3538, atom c3558, atom c3558r, atom c3558rc, atom c3708
- Weakness
- CWE-1188
- Vector
- CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H