VulnerabilityModified
CVE-2021-33080
Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information…
MEDIUM 6.8EPSS 0.26%
Does this matter?
Lower severity and a low EPSS score (0.26%). Track it; it rarely justifies an emergency change on its own.
Description
Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.
- CVSS 3.1
- 6.8 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 0.26% probability · 18th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-212
- Affected
- intel/optane ssd dc p4800x firmware · intel/optane ssd dc p4801x firmware · intel/optane ssd p5800x firmware · intel/optane memory h20 with solid state storage firmware · intel/optane memory h10 with solid state storage firmware · intel/optane ssd 905p firmware · intel/optane ssd 900p firmware
- Source
- secure@intel.com
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory
- https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdfBroken Link
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory
- https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdfBroken Link
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.