CVEvulnerability

CVE-2021-33080

6.8 MEDIUM Published 2022-05-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-05-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-212

Description

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

Affected configurations

• intel optane ssd dc p4800x firmware (< e2010600) • intel optane ssd dc p4801x firmware (< e2010600) • intel optane ssd p5800x firmware (< l0310200) • intel optane memory h20 with solid state storage firmware (< pgf028k) • intel optane memory h10 with solid state storage firmware (< tgf061k) • intel optane ssd 905p firmware (< fw600) • intel optane ssd 900p firmware (< fw600)

Related

Weakness · CWE (1)

  • CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer weakness

Referenced by CWE · observed example (1)

  • CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information weakness

References