Lucene search

K
cveIntelCVE-2021-33117
HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-33117

2022-05-1217:15:09
intel
web.nvd.nist.gov
78
8
cve-2021-33117
intel xeon
information disclosure
access control
bios
security vulnerability

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%

Improper access control for some 3rd Generation Intel® Xeon® Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.

Affected configurations

Nvd
Node
intelbiosRange<mr7
AND
intelxeon_gold_5315yMatch-
OR
intelxeon_gold_5317Match-
OR
intelxeon_gold_5318hMatch-
OR
intelxeon_gold_5318nMatch-
OR
intelxeon_gold_5318sMatch-
OR
intelxeon_gold_5318yMatch-
OR
intelxeon_gold_5320Match-
OR
intelxeon_gold_5320hMatch-
OR
intelxeon_gold_5320tMatch-
OR
intelxeon_gold_6312uMatch-
OR
intelxeon_gold_6314uMatch-
OR
intelxeon_gold_6326Match-
OR
intelxeon_gold_6328hMatch-
OR
intelxeon_gold_6328hlMatch-
OR
intelxeon_gold_6330Match-
OR
intelxeon_gold_6330hMatch-
OR
intelxeon_gold_6330nMatch-
OR
intelxeon_gold_6334Match-
OR
intelxeon_gold_6336yMatch-
OR
intelxeon_gold_6338Match-
OR
intelxeon_gold_6338nMatch-
OR
intelxeon_gold_6338tMatch-
OR
intelxeon_gold_6342Match-
OR
intelxeon_gold_6346Match-
OR
intelxeon_gold_6348Match-
OR
intelxeon_gold_6348hMatch-
OR
intelxeon_gold_6354Match-
OR
intelxeon_platinum_8351nMatch-
OR
intelxeon_platinum_8352mMatch-
OR
intelxeon_platinum_8352sMatch-
OR
intelxeon_platinum_8352vMatch-
OR
intelxeon_platinum_8352yMatch-
OR
intelxeon_platinum_8353hMatch-
OR
intelxeon_platinum_8354hMatch-
OR
intelxeon_platinum_8356hMatch-
OR
intelxeon_platinum_8358Match-
OR
intelxeon_platinum_8358pMatch-
OR
intelxeon_platinum_8360hMatch-
OR
intelxeon_platinum_8360hlMatch-
OR
intelxeon_platinum_8360yMatch-
OR
intelxeon_platinum_8362Match-
OR
intelxeon_platinum_8368Match-
OR
intelxeon_platinum_8368qMatch-
OR
intelxeon_platinum_8376hMatch-
OR
intelxeon_platinum_8376hlMatch-
OR
intelxeon_platinum_8380Match-
OR
intelxeon_platinum_8380hMatch-
OR
intelxeon_platinum_8380hlMatch-
OR
intelxeon_silver_4309yMatch-
OR
intelxeon_silver_4310Match-
OR
intelxeon_silver_4310tMatch-
OR
intelxeon_silver_4314Match-
OR
intelxeon_silver_4316Match-
Node
netappfas\/aff_biosMatch-
VendorProductVersionCPE
intelbios*cpe:2.3:o:intel:bios:*:*:*:*:*:*:*:*
intelxeon_gold_5315y-cpe:2.3:h:intel:xeon_gold_5315y:-:*:*:*:*:*:*:*
intelxeon_gold_5317-cpe:2.3:h:intel:xeon_gold_5317:-:*:*:*:*:*:*:*
intelxeon_gold_5318h-cpe:2.3:h:intel:xeon_gold_5318h:-:*:*:*:*:*:*:*
intelxeon_gold_5318n-cpe:2.3:h:intel:xeon_gold_5318n:-:*:*:*:*:*:*:*
intelxeon_gold_5318s-cpe:2.3:h:intel:xeon_gold_5318s:-:*:*:*:*:*:*:*
intelxeon_gold_5318y-cpe:2.3:h:intel:xeon_gold_5318y:-:*:*:*:*:*:*:*
intelxeon_gold_5320-cpe:2.3:h:intel:xeon_gold_5320:-:*:*:*:*:*:*:*
intelxeon_gold_5320h-cpe:2.3:h:intel:xeon_gold_5320h:-:*:*:*:*:*:*:*
intelxeon_gold_5320t-cpe:2.3:h:intel:xeon_gold_5320t:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 551

CNA Affected

[
  {
    "product": "Intel(R) Xeon(R) Scalable Processors",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Social References

More

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

0

Percentile

5.1%