Lucene search

[email protected]NVD:CVE-2021-33117

HistoryMay 12, 2022 - 5:15 p.m.

CVE-2021-33117

2022-05-1217:15:09

[email protected]

web.nvd.nist.gov

intel xeon scalable

access control

information disclosure

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.1%

JSON

Improper access control for some 3rd Generation Intel® Xeon® Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.

Affected configurations

Nvd

Node

intelbiosRange<mr7

AND

intelxeon_gold_5315yMatch-

intelxeon_gold_5317Match-

intelxeon_gold_5318hMatch-

intelxeon_gold_5318nMatch-

intelxeon_gold_5318sMatch-

intelxeon_gold_5318yMatch-

intelxeon_gold_5320Match-

intelxeon_gold_5320hMatch-

intelxeon_gold_5320tMatch-

intelxeon_gold_6312uMatch-

intelxeon_gold_6314uMatch-

intelxeon_gold_6326Match-

intelxeon_gold_6328hMatch-

intelxeon_gold_6328hlMatch-

intelxeon_gold_6330Match-

intelxeon_gold_6330hMatch-

intelxeon_gold_6330nMatch-

intelxeon_gold_6334Match-

intelxeon_gold_6336yMatch-

intelxeon_gold_6338Match-

intelxeon_gold_6338nMatch-

intelxeon_gold_6338tMatch-

intelxeon_gold_6342Match-

intelxeon_gold_6346Match-

intelxeon_gold_6348Match-

intelxeon_gold_6348hMatch-

intelxeon_gold_6354Match-

intelxeon_platinum_8351nMatch-

intelxeon_platinum_8352mMatch-

intelxeon_platinum_8352sMatch-

intelxeon_platinum_8352vMatch-

intelxeon_platinum_8352yMatch-

intelxeon_platinum_8353hMatch-

intelxeon_platinum_8354hMatch-

intelxeon_platinum_8356hMatch-

intelxeon_platinum_8358Match-

intelxeon_platinum_8358pMatch-

intelxeon_platinum_8360hMatch-

intelxeon_platinum_8360hlMatch-

intelxeon_platinum_8360yMatch-

intelxeon_platinum_8362Match-

intelxeon_platinum_8368Match-

intelxeon_platinum_8368qMatch-

intelxeon_platinum_8376hMatch-

intelxeon_platinum_8376hlMatch-

intelxeon_platinum_8380Match-

intelxeon_platinum_8380hMatch-

intelxeon_platinum_8380hlMatch-

intelxeon_silver_4309yMatch-

intelxeon_silver_4310Match-

intelxeon_silver_4310tMatch-

intelxeon_silver_4314Match-

intelxeon_silver_4316Match-

Node

netappfas\/aff_biosMatch-

References

security.netapp.com/advisory/ntap-20220818-0001/

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2021-33117

prion1 redhatcve1 f51 cve1 cvelist1 ubuntucve1 debiancve1 intel1 veracode1 nessus4 amazon2 openvas2 ubuntu2 osv2 cloudfoundry1