Lucene search
HistoryFeb 16, 2023 - 9:15 p.m.
CVE-2021-33104
cve-2021-33104
intel ofu
access control
denial of service
local access
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.2%
Improper access control in the Intel® OFU software before version 14.1.28 may allow an authenticated user to potentially enable denial of service via local access.
Affected configurations
Node
intelone_boot_flash_updateRange<14.1.28
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | one_boot_flash_update | * | cpe:2.3:a:intel:one_boot_flash_update:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2021-33104
2023-02-16 21:15:11
prion
prion
Improper access control
2023-02-16 21:15:00
intel
intel
Intel® OFU Software Advisory
2023-02-14 00:00:00
cvelist
cvelist
CVE-2021-33104
2023-02-16 20:00:29
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS
0
Percentile
13.2%
Related for NVD:CVE-2021-33104