Intel representatives recommended to update the BIOS firmware to protect against three new vulnerabilities. This is reported by the Bleeping Computer edition.
Pair of dangerous vulnerabilities appear under the names of CVE-2021-0157 and CVE-2021-0158 and have an estimate of 8.2 points according to the CVSSV3 standard. With their help, attackers can get a high level of privileges on the device, which can lead to hacking equipment. The first vulnerability found is associated with the distribution of control flows, the second – with an error when checking input.
Judging by Intel, vulnerabilities are applied to the processors of Xeon E, Xeon W, Celereon N, Pentium Silver, Core 7, 10, and 11 generations, as well as other lines. The company consulted to eliminate vulnerabilities using BIOS update.
The third Vulnerability of CVE-2021-0146 is associated with cars that are equipped with Intel processors. It allows you to get a high level of privileges during debugging process.
Despite the high level of danger, the vulnerability can be used only with direct contact with the processor. However, hackers can crack the devices locally and then remotely control the equipment.
At the end of the summer, security specialists revealed a new way of hacking AMD processors. Hacking is based on forced data exchange between microarchctural elements of chips.