VulnerabilityModified
CVE-2021-33069
Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to potentially enable denial of service via local access.
MEDIUM 5.5EPSS 0.23%
Does this matter?
Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.
Description
Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to potentially enable denial of service via local access.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.23% probability · 14th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-404
- Affected
- intel/optane ssd dc p4800x firmware · intel/optane ssd dc p4801x firmware · intel/optane ssd p5800x firmware · intel/optane memory h20 with solid state storage firmware · intel/optane memory h10 with solid state storage firmware · intel/optane ssd 905p firmware · intel/optane ssd 900p firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory
- https://www.solidigm.com/content/dam/solidigm/en/site/support/support-community/cve-(security)/documents/public-security-advisory.pdf
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory
- https://www.solidigm.com/content/dam/solidigm/en/site/support/support-community/cve-(security)/documents/public-security-advisory.pdf
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.