Vulnerability found in Intel processors that allows access to user data

A vulnerability was found in many Intel chips that allows attackers to hack into computers and gain access to protected user data. The error was found by representatives of Positive Technologies. Laptops, Internet of Thing devices, smart gadgets for the home, medical equipment and modern cars can be exposed to the dangers of hacking due to the vulnerability.



The error was named CVE-2021-0146. For the most part, it affects mobile chips of the Apollo Lake, Gemini Lake and Lake Refresh lines. With the help of the vulnerability, unscrupulous users can get hold of the key and become the owner of private data on a lost or stolen device.

In theory, a criminal could get into the production of laptops based on Intel solutions to obtain an encryption key from Intel CSME (Converged Security & Management Engine) software, in order to then introduce spyware on a large number of devices that is not monitored by antivirus programs. The error also makes it possible to extract the key used by the Intel Platform Trust Technology (PTT) and Intel Enhanced Privacy ID algorithms, and this potentially turns it into the most dangerous.

Intel has provided access to the necessary updates, so owners of devices based on the above chips should immediately use the latest UEFI BIOS update.