Lucene search

K
cveIntelCVE-2021-33083
HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-33083

2022-05-1217:15:09
CWE-287
intel
web.nvd.nist.gov
95
5
cve-2021-33083
intel
ssd
firmware
authentication
info disclosure
nvd

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

0

Percentile

12.6%

Improper authentication in firmware for some Intelยฎ SSD, Intelยฎ Optaneโ„ข SSD, Intelยฎ Optaneโ„ข SSD DC and Intelยฎ SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.

Affected configurations

Nvd
Node
inteloptane_ssd_dc_p4800x_firmwareRange<e2010600
AND
inteloptane_ssd_dc_p4800xMatch-
Node
inteloptane_ssd_dc_p4801x_firmwareRange<e2010600
AND
inteloptane_ssd_dc_p4801xMatch-
Node
inteloptane_ssd_p5800x_firmwareRange<l0310200
AND
inteloptane_ssd_p5800xMatch-
Node
inteloptane_memory_h20_with_solid_state_storage_firmwareRange<pgf028k
AND
inteloptane_memory_h20_with_solid_state_storageMatch-
Node
inteloptane_memory_h10_with_solid_state_storage_firmwareRange<tgf061k
AND
inteloptane_memory_h10_with_solid_state_storageMatch-
Node
inteloptane_ssd_905p_firmwareRange<fw600
AND
inteloptane_ssd_905pMatch-
Node
inteloptane_ssd_900p_firmwareRange<fw600
AND
inteloptane_ssd_900pMatch-
VendorProductVersionCPE
inteloptane_ssd_dc_p4800x_firmware*cpe:2.3:o:intel:optane_ssd_dc_p4800x_firmware:*:*:*:*:*:*:*:*
inteloptane_ssd_dc_p4800x-cpe:2.3:h:intel:optane_ssd_dc_p4800x:-:*:*:*:*:*:*:*
inteloptane_ssd_dc_p4801x_firmware*cpe:2.3:o:intel:optane_ssd_dc_p4801x_firmware:*:*:*:*:*:*:*:*
inteloptane_ssd_dc_p4801x-cpe:2.3:h:intel:optane_ssd_dc_p4801x:-:*:*:*:*:*:*:*
inteloptane_ssd_p5800x_firmware*cpe:2.3:o:intel:optane_ssd_p5800x_firmware:*:*:*:*:*:*:*:*
inteloptane_ssd_p5800x-cpe:2.3:h:intel:optane_ssd_p5800x:-:*:*:*:*:*:*:*
inteloptane_memory_h20_with_solid_state_storage_firmware*cpe:2.3:o:intel:optane_memory_h20_with_solid_state_storage_firmware:*:*:*:*:*:*:*:*
inteloptane_memory_h20_with_solid_state_storage-cpe:2.3:h:intel:optane_memory_h20_with_solid_state_storage:-:*:*:*:*:*:*:*
inteloptane_memory_h10_with_solid_state_storage_firmware*cpe:2.3:o:intel:optane_memory_h10_with_solid_state_storage_firmware:*:*:*:*:*:*:*:*
inteloptane_memory_h10_with_solid_state_storage-cpe:2.3:h:intel:optane_memory_h10_with_solid_state_storage:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 141

CNA Affected

[
  {
    "product": "Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Social References

More

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

AI Score

4.8

Confidence

High

EPSS

0

Percentile

12.6%