CVEvulnerability
CVE-2021-33107
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-02-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-522
Description
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Affected configurations
• intel active management technology software development kit (< 16.0.3)
• intel setup and configuration software (< 12.2)
• intel management engine bios extension (< 15.0.0.0004)
• intel management engine bios extension (< 14.0.0.0004)
• intel management engine bios extension (< 12.0.0.0011)
• intel management engine bios extension (< 11.0.0.0012)
• intel core i3 firmware
• intel core i3-1000g1 firmware
• intel core i3-1000g4 firmware
• intel core i3-1000ng4 firmware
• intel core i3-1005g1 firmware
• intel core i3-10100 firmware
• intel core i3-10100e firmware
• intel core i3-10100f firmware
• intel core i3-10100t firmware
• intel core i3-10100te firmware
• intel core i3-10100y firmware
• intel core i3-10105 firmware
• intel core i3-10105f firmware
• intel core i3-10105t firmware
• intel core i3-10110u firmware
• intel core i3-10110y firmware
• intel core i3-10300 firmware
• intel core i3-10300t firmware
• intel core i3-10305 firmware
• intel core i3-10305t firmware
• intel core i3-10320 firmware
• intel core i3-10325 firmware
• intel core i3 8100 firmware
• intel core i3 8100f firmware
• intel core i3 8100t firmware
• intel core i3 8300 firmware
• intel core i3 8300t firmware
• intel core i3 8350k firmware
• intel core i3 9100 firmware
• intel core i3 9100f firmware
• intel core i3 9100t firmware
• intel core i3 9300 firmware
• intel core i3 9300t firmware
• intel core i3 9320 firmware
• intel core i3 9350k firmware
• intel core i3 9350kf firmware
• intel core i5 firmware
• intel core i5\+8400 firmware
• intel core i5\+8500 firmware
• intel core i5-10110y firmware
• intel core i5-10200h firmware
• intel core i5-10210u firmware
• intel core i5-10210y firmware
• intel core i5-10300h firmware
• intel core i5-1030g4 firmware
• intel core i5-1030g7 firmware
• intel core i5-1030ng7 firmware
• intel core i5-10310u firmware
• intel core i5-10310y firmware
• intel core i5-1035g1 firmware
• intel core i5-1035g4 firmware
• intel core i5-1035g7 firmware
• intel core i5-1038ng7 firmware
• intel core i5-10400 firmware
… and 123 more
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html Patch, Vendor Advisory