Lucene search

PRIOn knowledge basePRION:CVE-2021-33107

HistoryFeb 09, 2022 - 11:15 p.m.

Information disclosure

2022-02-0923:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

26.1%

JSON

Insufficiently protected credentials in USB provisioning for Intel® AMT SDK before version 16.0.3, Intel® SCS before version 12.2 and Intel® MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

CPENameOperatorVersion
active_management_technology_software_development_kitlt16.0.3
management_engine_bios_extensionlt15.0.0.0004
management_engine_bios_extensionlt14.0.0.0004
management_engine_bios_extensionlt12.0.0.0011
management_engine_bios_extensionlt11.0.0.0012
setup_and_configuration_softwarelt12.2

Name	Operator	Version
active_management_technology_software_development_kit	lt	16.0.3
management_engine_bios_extension	lt	15.0.0.0004
management_engine_bios_extension	lt	14.0.0.0004
management_engine_bios_extension	lt	12.0.0.0011
management_engine_bios_extension	lt	11.0.0.0012
setup_and_configuration_software	lt	12.2

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

4.5 Medium

AI Score

Confidence

High

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

26.1%

JSON

Related for PRION:CVE-2021-33107