CVE-2021-33086

CWE-787 — Out-of-bounds Write3 documents3 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 86.08%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
103
Intel NUC 10 Performance KIT Nuc10i3fnh FirmwareIntel NUC 10 Performance KIT Nuc10i3fnhf FirmwareIntel NUC 10 Performance KIT Nuc10i3fnhfa Firmware+100 more
Timeline
PublishedNov 17
Latest updateMay 24

Description

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages104 packages

▶NVDintel/nuc_kit_nuc6cayh_firmware< ayaplcel.86a.0069
▶NVDintel/nuc_kit_nuc6cays_firmware< ayaplcel.86a.0069
▶NVDintel/nuc_kit_nuc7cjyh_firmware< jyglkcpx.86a.0062
▶NVDintel/nuc_kit_nuc7pjyh_firmware< jyglkcpx.86a.0062
▶NVDintel/nuc_kit_nuc8i3beh_firmware< becfl357.86a.0088

🔴Vulnerability Details

2
GHSA
GHSA-82mx-gqwp-hp24: Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access↗2022-05-24
▶
CVEList
CVE-2021-33086: Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access↗2021-11-17
▶