Lucene search

PRIOn knowledge basePRION:CVE-2021-33075

HistoryMay 12, 2022 - 5:15 p.m.

Race condition

2022-05-1217:15:00

PRIOn knowledge base

www.prio-n.com

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.5 Medium

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

Race condition in firmware for some Intel® Optane™ SSD, Intel® Optane™ SSD DC and Intel® SSD DC Products may allow a privileged user to potentially enable denial of service via local access.

CPENameOperatorVersion
optane_memory_h10_with_solid_state_storage_firmwareeq< tgf61k
optane_memory_h20_with_solid_state_storage_firmwareeq< pgf28k
optane_ssd_900p_firmwareeq< fw600
optane_ssd_905p_firmwareeq< fw600
optane_ssd_dc_p4800x_firmwareeq< e2010600
optane_ssd_dc_p4801x_firmwareeq< e2010600
optane_ssd_p5800x_firmwareeq< l310200

Name	Operator	Version
optane_memory_h10_with_solid_state_storage_firmware	eq	< tgf61k
optane_memory_h20_with_solid_state_storage_firmware	eq	< pgf28k
optane_ssd_900p_firmware	eq	< fw600
optane_ssd_905p_firmware	eq	< fw600
optane_ssd_dc_p4800x_firmware	eq	< e2010600
optane_ssd_dc_p4801x_firmware	eq	< e2010600
optane_ssd_p5800x_firmware	eq	< l310200

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html

www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf

4.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

4.5 Medium

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for PRION:CVE-2021-33075