CVE-2021-0060

MEDIUM
6.6
CVSS Score
Published: February 9, 2022 at 10:04 PM UTC
Updated: June 17, 2026 at 03:29 AM UTC
191 products affected across 2 vendorsCloud BackupHci Compute Node BIOSSolidfire BIOS

Using Intel(R) SPS by N/A?

Get instant alerts when new vulnerabilities affect Intel(R) SPS - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.6
Exploit prediction
EPSS 0.3%
SSVC
No known exploit

Description

Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_04.04.04.033.0, SPS_E5_04.04.03.281.0, SPS_E5_03.01.03.116.0, SPS_E3_05.01.04.309.0, SPS_02.04.00.101.0, SPS_SoC-A_05.00.03.114.0, SPS_SoC-X_04.00.04.326.0, SPS_SoC-X_03.00.03.117.0, IGN_E5_91.00.00.167.0, SPS_PHI_03.01.03.078.0 may allow an authenticated user to potentially enable escalation of privilege via physical access.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < csme_15.0.35
Affected range stops below csme_15.0.35, so it looks safe — our inference, not a vendor statement
intel-core-i3-11100he (environment) · intel-core-i3-1110g4 (environment) · intel-core-i3-1115g4 (environment) · intel-core-i3-1115g4e (environment) · intel-core-i3-1115gre (environment) · intel-core-i3-1120g4 (environment) · intel-core-i3-1125g4 (environment) · intel-core-i5-11260h (environment) · intel-core-i5-11300h (environment) · intel-core-i5-1130g7 (environment) · intel-core-i5-11320h (environment) · intel-core-i5-1135g7 (environment) · intel-core-i5-11400 (environment) · intel-core-i5-11400f (environment) · intel-core-i5-11400h (environment) · intel-core-i5-11400t (environment) · intel-core-i5-1140g7 (environment) · intel-core-i5-1145g7 (environment) · intel-core-i5-1145g7e (environment) · intel-core-i5-1145gre (environment) · intel-core-i5-11500 (environment) · intel-core-i5-11500h (environment) · intel-core-i5-11500he (environment) · intel-core-i5-11500t (environment) · intel-core-i5-1155g7 (environment) · intel-core-i5-11600 (environment) · intel-core-i5-11600k (environment) · intel-core-i5-11600kf (environment) · intel-core-i5-11600t (environment) · intel-core-i7-11370h (environment) · intel-core-i7-11375h (environment) · intel-core-i7-11390h (environment) · intel-core-i7-11600h (environment) · intel-core-i7-1160g7 (environment) · intel-core-i7-1165g7 (environment) · intel-core-i7-11700 (environment) · intel-core-i7-11700f (environment) · intel-core-i7-11700k (environment) · intel-core-i7-11700kf (environment) · intel-core-i7-11700t (environment) · intel-core-i7-11800h (environment) · intel-core-i7-1180g7 (environment) · intel-core-i7-11850h (environment) · intel-core-i7-11850he (environment) · intel-core-i7-1185g7 (environment) · intel-core-i7-1185g7e (environment) · intel-core-i7-1185gre (environment) · intel-core-i7-1195g7 (environment) · intel-core-i9-11900 (environment) · intel-core-i9-11900f (environment) · intel-core-i9-11900h (environment) · intel-core-i9-11900k (environment) · intel-core-i9-11900kf (environment) · intel-core-i9-11900t (environment) · intel-core-i9-11950h (environment) · intel-core-i9-11980hk (environment)
v < sps_soc-a_04.00.04.501.0
Affected range stops below sps_soc-a_04.00.04.501.0, so it looks safe — our inference, not a vendor statement
intel-atom-c3308 (environment) · intel-atom-c3336 (environment) · intel-atom-c3338 (environment) · intel-atom-c3338r (environment) · intel-atom-c3436l (environment) · intel-atom-c3508 (environment) · intel-atom-c3538 (environment) · intel-atom-c3558 (environment) · intel-atom-c3558r (environment) · intel-atom-c3708 (environment) · intel-atom-c3750 (environment) · intel-atom-c3758 (environment) · intel-atom-c3758r (environment) · intel-atom-c3808 (environment) · intel-atom-c3830 (environment) · intel-atom-c3850 (environment) · intel-atom-c3858 (environment) · intel-atom-c3950 (environment) · intel-atom-c3955 (environment) · intel-atom-c3958 (environment)
v < sps_phi_03.01.03.078.0
Affected range stops below sps_phi_03.01.03.078.0, so it looks safe — our inference, not a vendor statement
intel-atom-c612 (environment)
v < sps_soc-a_05.00.03.114.0
Affected range stops below sps_soc-a_05.00.03.114.0, so it looks safe — our inference, not a vendor statement
intel-atom-p5921b (environment) · intel-atom-p5931b (environment) · intel-atom-p5942b (environment) · intel-atom-p5962b (environment)
v < sps_e3_05.01.04.309.0
Affected range stops below sps_e3_05.01.04.309.0, so it looks safe — our inference, not a vendor statement
intel-c242 (environment) · intel-c246 (environment) · intel-cm246 (environment)
v < sps_e5_04.01.04.516.0
Affected range stops below sps_e5_04.01.04.516.0, so it looks safe — our inference, not a vendor statement
intel-c621 (environment) · intel-c622 (environment) · intel-c624 (environment) · intel-c625 (environment) · intel-c626 (environment) · intel-c627 (environment) · intel-c628 (environment) · intel-c629 (environment)
v < sps_e5_04.04.03.281.0
Affected range stops below sps_e5_04.04.03.281.0, so it looks safe — our inference, not a vendor statement
intel-c621a (environment) · intel-c627a (environment) · intel-c629a (environment)
v < csme_15.0.35
Affected range stops below csme_15.0.35, so it looks safe — our inference, not a vendor statement
intel-celeron-6305 (environment) · intel-celeron-6305e (environment) · intel-celeron-6600he (environment)
v < csme_15.0.35
Affected range stops below csme_15.0.35, so it looks safe — our inference, not a vendor statement
intel-pentium-gold-4410y (environment) · intel-pentium-gold-4415u (environment) · intel-pentium-gold-4415y (environment) · intel-pentium-gold-4417u (environment) · intel-pentium-gold-4425y (environment) · intel-pentium-gold-5405u (environment) · intel-pentium-gold-6405u (environment) · intel-pentium-gold-6500y (environment) · intel-pentium-gold-7505 (environment) · intel-pentium-gold-g5400 (environment) · intel-pentium-gold-g5400t (environment) · intel-pentium-gold-g5420 (environment) · intel-pentium-gold-g5420t (environment) · intel-pentium-gold-g5500 (environment) · intel-pentium-gold-g5500t (environment) · intel-pentium-gold-g5600 (environment) · intel-pentium-gold-g5600t (environment) · intel-pentium-gold-g5620 (environment) · intel-pentium-gold-g6400 (environment) · intel-pentium-gold-g6400e (environment) · intel-pentium-gold-g6400t (environment) · intel-pentium-gold-g6400te (environment) · intel-pentium-gold-g6405 (environment) · intel-pentium-gold-g6405t (environment) · intel-pentium-gold-g6500 (environment) · intel-pentium-gold-g6500t (environment) · intel-pentium-gold-g6505 (environment) · intel-pentium-gold-g6505t (environment) · intel-pentium-gold-g6600 (environment) · intel-pentium-gold-g6605 (environment) · intel-pentium-gold-g7400 (environment) · intel-pentium-gold-g7400e (environment) · intel-pentium-gold-g7400t (environment) · intel-pentium-gold-g7400te (environment)
v < sps_soc-x_03.00.03.117.0
Affected range stops below sps_soc-x_03.00.03.117.0, so it looks safe — our inference, not a vendor statement
intel-xeon-d-1513n (environment) · intel-xeon-d-1518 (environment) · intel-xeon-d-1520 (environment) · intel-xeon-d-1521 (environment) · intel-xeon-d-1523n (environment) · intel-xeon-d-1527 (environment) · intel-xeon-d-1528 (environment) · intel-xeon-d-1529 (environment) · intel-xeon-d-1531 (environment) · intel-xeon-d-1533n (environment) · intel-xeon-d-1537 (environment) · intel-xeon-d-1539 (environment) · intel-xeon-d-1540 (environment) · intel-xeon-d-1541 (environment) · intel-xeon-d-1543n (environment) · intel-xeon-d-1548 (environment) · intel-xeon-d-1553n (environment) · intel-xeon-d-1557 (environment) · intel-xeon-d-1559 (environment) · intel-xeon-d-1567 (environment) · intel-xeon-d-1571 (environment) · intel-xeon-d-1577 (environment)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

SSVC — Action Prioritization

SSVCNo known exploitNot automatableTotal impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

6.6MEDIUMCISA-ADP
Attack Vector
PHYSICAL
Complexity
LOW
Privileges
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card