CVE-2021-33083

CWE-287 — Improper Authentication3 documents3 sources

Severity

4.4MEDIUM

EPSS

0.1%

top 79.84%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Optane Memory H10 With Solid State Storage Firmware Intel Optane Memory H20 With Solid State Storage Firmware Intel Optane SSD 900p Firmware +4 more

Timeline

PublishedMay 12

Latest updateMay 13

Description

Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages7 packages

▶NVDintel/optane_ssd_900p_firmware< fw600

▶NVDintel/optane_ssd_905p_firmware< fw600

▶NVDintel/optane_ssd_p5800x_firmware< l0310200

▶NVDintel/optane_ssd_dc_p4800x_firmware< e2010600

▶NVDintel/optane_ssd_dc_p4801x_firmware< e2010600

🔴Vulnerability Details

GHSA

GHSA-7gwp-9c24-5fpc: Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow↗2022-05-13

▶

CVEList

CVE-2021-33083: Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow↗2022-05-12

▶