Lucene search
HistoryFeb 16, 2023 - 9:15 p.m.
CVE-2021-33104
cve-2021-33104
improper access control
intel ofu
denial of service
nvd
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Improper access control in the Intel® OFU software before version 14.1.28 may allow an authenticated user to potentially enable denial of service via local access.
Affected configurations
Node
intelsoftware_managerRange<14.1.28
| CPE | Name | Operator | Version |
|---|---|---|---|
| intel:one_boot_flash_update | intel one boot flash update | lt | 14.1.28 |
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) OFU software",
"versions": [
{
"version": "before version 14.1.28",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2021-33104
2023-02-16 20:00:29
nvd
nvd
CVE-2021-33104
2023-02-16 21:15:11
intel
intel
Intel® OFU Software Advisory
2023-02-14 00:00:00
prion
prion
Improper access control
2023-02-16 21:15:00
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
5.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.1%
Related for CVE-2021-33104