CVEvulnerability
CVE-2021-33077
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-05-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Affected configurations
• intel optane ssd dc p4800x firmware (< e2010600)
• intel optane ssd dc p4801x firmware (< e2010600)
• intel optane ssd p5800x firmware (< l0310200)
• intel optane memory h20 with solid state storage firmware (< pgf028k)
• intel optane memory h10 with solid state storage firmware (< tgf061k)
• intel optane ssd 905p firmware (< fw600)
• intel optane ssd 900p firmware (< fw600)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html Mitigation, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html Mitigation, Vendor Advisory