Lucene search

K
cve[email protected]CVE-2021-33075
HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-33075

2022-05-1217:15:08
CWE-362
web.nvd.nist.gov
60
4
cve
2021
33075
firmware
intel
ssd
optane
dc
products
race condition
denial of service

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%

Race condition in firmware for some Intelยฎ Optaneโ„ข SSD, Intelยฎ Optaneโ„ข SSD DC and Intelยฎ SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

Affected configurations

NVD
Node
inteloptane_ssd_dc_p4800xMatch-
AND
inteloptane_ssd_dc_p4800x_firmwareRange<e2010600
Node
inteloptane_ssd_dc_p4801xMatch-
AND
inteloptane_ssd_dc_p4801x_firmwareRange<e2010600
Node
inteloptane_ssd_p5800xMatch-
AND
inteloptane_ssd_p5800x_firmwareRange<l0310200
Node
inteloptane_memory_h20_with_solid_state_storageMatch-
AND
inteloptane_memory_h20_with_solid_state_storage_firmwareRange<pgf028k
Node
inteloptane_memory_h10_with_solid_state_storageMatch-
AND
inteloptane_memory_h10_with_solid_state_storage_firmwareRange<tgf061k
Node
inteloptane_ssd_905pMatch-
AND
inteloptane_ssd_905p_firmwareRange<fw600
Node
inteloptane_ssd_900p_firmwareRange<fw600
AND
inteloptane_ssd_900pMatch-

CNA Affected

[
  {
    "product": "Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Social References

More

4.7 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.8 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.8%