High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-02-09	CVE-2021-0091	Improper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privilege via local access. local low complexity intel netapp	7.8
2022-02-09	CVE-2021-0099	Insufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. local low complexity intel netapp	7.8
2022-02-09	CVE-2021-0116	Out-of-bounds Write vulnerability in multiple products Out-of-bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-787	7.8
2022-02-09	CVE-2021-0117	Pointer issues in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity netapp intel	7.8
2022-02-09	CVE-2021-0156	Improper Input Validation vulnerability in multiple products Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. local low complexity netapp intel CWE-20	7.8
2022-02-03	CVE-2021-33625	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products An issue was discovered in Kernel 5.x in Insyde InsydeH2O, affecting HddPassword. local high complexity insyde netapp siemens CWE-119	7.5
2020-11-12	CVE-2020-0590	Improper Input Validation vulnerability in multiple products Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. local low complexity intel netapp siemens CWE-20	7.8