K56213806 : Intel SSD INTEL-SA-00563 vulnerabilities

Security Advisory Description

• CVE-2021-33069

Improper resource shutdown or release in firmware for some Intel® SSD, Intel® SSD DC, Intel® Optane™ SSD and Intel® Optane™ SSD DC may allow a privileged user to potentially enable denial of service via local access.

• CVE-2021-33074

Protection mechanism failure in firmware for some Intel® SSD, Intel® SSD DC and Intel® Optane™ SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.

• CVE-2021-33075

Race condition in firmware for some Intel® Optane™ SSD, Intel® Optane™ SSD DC and Intel® SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

• CVE-2021-33077

Insufficient control flow management in firmware for some Intel® SSD, Intel® Optane™ SSD and Intel® SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

• CVE-2021-33078

Race condition within a thread in firmware for some Intel® Optane™ SSD and Intel® SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

• CVE-2021-33080

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel® SSD DC, Intel® Optane™ SSD and Intel® Optane™ SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

• CVE-2021-33082

Sensitive information in resource not removed before reuse in firmware for some Intel® SSD and Intel® Optane™ SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.

• CVE-2021-33083

Improper authentication in firmware for some Intel® SSD, Intel® Optane™ SSD, Intel® Optane™ SSD DC and Intel® SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.

Impact

There is no impact; F5 products are not affected by this vulnerability.