CVE-2021-33060: High severity intel xeon gold 5315y firmware vulnerability
Published Aug 18, 2022
·Updated
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
288 affected components
Intel Xeon Gold 5315y Firmware
Intel Xeon Gold 5315y
Intel Xeon Gold 5317 Firmware
Intel Xeon Gold 5317
Intel Xeon Gold 5318n Firmware
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s Firmware
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y Firmware
Intel Xeon Gold 5318y
Intel Xeon Gold 5320 Firmware
Intel Xeon Gold 5320
Intel Xeon Gold 5320t Firmware
Intel Xeon Gold 5320t
Intel Xeon Gold 6312u Firmware
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u Firmware
Intel Xeon Gold 6314u
Intel Xeon Gold 6326 Firmware
Intel Xeon Gold 6326
Intel Xeon Gold 6330 Firmware
Intel Xeon Gold 6330
Intel Xeon Gold 6330n Firmware
Intel Xeon Gold 6330n
Intel Xeon Gold 6334 Firmware
Intel Xeon Gold 6334
Intel Xeon Gold 6336y Firmware
Intel Xeon Gold 6336y
Intel Xeon Gold 6338 Firmware
Intel Xeon Gold 6338
Intel Xeon Gold 6338n Firmware
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t Firmware
Intel Xeon Gold 6338t
Intel Xeon Gold 6342 Firmware
Intel Xeon Gold 6342
Intel Xeon Gold 6346 Firmware
Intel Xeon Gold 6346
Intel Xeon Gold 6348 Firmware
Intel Xeon Gold 6348
Intel Xeon Gold 6354 Firmware
Intel Xeon Gold 6354
Intel Xeon Platinum 8351n Firmware
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352m Firmware
Intel Xeon Platinum 8352m
Intel Xeon Platinum 8352s Firmware
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v Firmware
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y Firmware
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8358 Firmware
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p Firmware
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360y Firmware
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362 Firmware
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368 Firmware
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q Firmware
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8380 Firmware
Intel Xeon Platinum 8380
Intel Xeon Silver 4309y Firmware
Intel Xeon Silver 4309y
Intel Xeon Silver 4310 Firmware
Intel Xeon Silver 4310
Intel Xeon Silver 4310t Firmware
Intel Xeon Silver 4310t
Intel Xeon Silver 4314 Firmware
Intel Xeon Silver 4314
Intel Xeon Silver 4316 Firmware
Intel Xeon Silver 4316
Intel Xeon Gold 6330h Firmware
Intel Xeon Gold 6330h
Intel Xeon Platinum 8356h Firmware
Intel Xeon Platinum 8356h
Intel Xeon Platinum 8360h Firmware
Intel Xeon Platinum 8360h
Intel Xeon Platinum 8360hl Firmware
Intel Xeon Platinum 8360hl
Intel Xeon Gold 5318h Firmware
Intel Xeon Gold 5318h
Intel Xeon Gold 5320h Firmware
Intel Xeon Gold 5320h
Intel Xeon Gold 6328h Firmware
Intel Xeon Gold 6328h
Intel Xeon Gold 6328hl Firmware
Intel Xeon Gold 6328hl
Intel Xeon Gold 6348h Firmware
Intel Xeon Gold 6348h
Intel Xeon Platinum 8353h Firmware
Intel Xeon Platinum 8353h
Intel Xeon Platinum 8354h Firmware
Intel Xeon Platinum 8354h
Intel Xeon Platinum 8376h Firmware
Intel Xeon Platinum 8376h
Intel Xeon Platinum 8376hl Firmware
Intel Xeon Platinum 8376hl
Intel Xeon Platinum 8380h Firmware
Intel Xeon Platinum 8380h
Intel Xeon Platinum 8380hl Firmware
Intel Xeon Platinum 8380hl
NetApp Aff C190 Firmware
NetApp Aff C190
NetApp Aff A200 Firmware
NetApp Aff A200
NetApp Aff A220 Firmware
NetApp Aff A220
NetApp Aff A250 Firmware
NetApp Aff A250
NetApp Aff A300 Firmware
NetApp Aff A300
NetApp Aff A320 Firmware
NetApp Aff A320
NetApp Aff A400 Firmware
NetApp Aff A400
NetApp Aff A700 Firmware
NetApp Aff A700
NetApp Aff A700s Firmware
NetApp AFF A700s
NetApp Aff A800 Firmware
NetApp Aff A800
NetApp Aff A900 Firmware
NetApp Aff A900
NetApp Fas500f Firmware
NetApp Fas500f
NetApp Fas2600 Firmware
NetApp Fas2600
NetApp Fas2700 Firmware
NetApp Fas2700
NetApp Fas8200 Firmware
NetApp Fas8200
NetApp Fas8300 Firmware
NetApp Fas8300
NetApp Fas8700 Firmware
NetApp Fas8700
NetApp Fas9000 Firmware
NetApp Fas9000
NetApp Fas9500 Firmware
NetApp Fas9500
All of the following
Intel Xeon Gold 5315y Firmware
Intel Xeon Gold 5315y
All of the following
Intel Xeon Gold 5317 Firmware
Intel Xeon Gold 5317
All of the following
Intel Xeon Gold 5318n Firmware
Intel Xeon Gold 5318n
All of the following
Intel Xeon Gold 5318s Firmware
Intel Xeon Gold 5318s
All of the following
Intel Xeon Gold 5318y Firmware
Intel Xeon Gold 5318y
All of the following
Intel Xeon Gold 5320 Firmware
Intel Xeon Gold 5320
All of the following
Intel Xeon Gold 5320t Firmware
Intel Xeon Gold 5320t
All of the following
Intel Xeon Gold 6312u Firmware
Intel Xeon Gold 6312u
All of the following
Intel Xeon Gold 6314u Firmware
Intel Xeon Gold 6314u
All of the following
Intel Xeon Gold 6326 Firmware
Intel Xeon Gold 6326
All of the following
Intel Xeon Gold 6330 Firmware
Intel Xeon Gold 6330
All of the following
Intel Xeon Gold 6330n Firmware
Intel Xeon Gold 6330n
All of the following
Intel Xeon Gold 6334 Firmware
Intel Xeon Gold 6334
All of the following
Intel Xeon Gold 6336y Firmware
Intel Xeon Gold 6336y
All of the following
Intel Xeon Gold 6338 Firmware
Intel Xeon Gold 6338
All of the following
Intel Xeon Gold 6338n Firmware
Intel Xeon Gold 6338n
All of the following
Intel Xeon Gold 6338t Firmware
Intel Xeon Gold 6338t
All of the following
Intel Xeon Gold 6342 Firmware
Intel Xeon Gold 6342
All of the following
Intel Xeon Gold 6346 Firmware
Intel Xeon Gold 6346
All of the following
Intel Xeon Gold 6348 Firmware
Intel Xeon Gold 6348
All of the following
Intel Xeon Gold 6354 Firmware
Intel Xeon Gold 6354
All of the following
Intel Xeon Platinum 8351n Firmware
Intel Xeon Platinum 8351n
All of the following
Intel Xeon Platinum 8352m Firmware
Intel Xeon Platinum 8352m
All of the following
Intel Xeon Platinum 8352s Firmware
Intel Xeon Platinum 8352s
All of the following
Intel Xeon Platinum 8352v Firmware
Intel Xeon Platinum 8352v
All of the following
Intel Xeon Platinum 8352y Firmware
Intel Xeon Platinum 8352y
All of the following
Intel Xeon Platinum 8358 Firmware
Intel Xeon Platinum 8358
All of the following
Intel Xeon Platinum 8358p Firmware
Intel Xeon Platinum 8358p
All of the following
Intel Xeon Platinum 8360y Firmware
Intel Xeon Platinum 8360y
All of the following
Intel Xeon Platinum 8362 Firmware
Intel Xeon Platinum 8362
All of the following
Intel Xeon Platinum 8368 Firmware
Intel Xeon Platinum 8368
All of the following
Intel Xeon Platinum 8368q Firmware
Intel Xeon Platinum 8368q
All of the following
Intel Xeon Platinum 8380 Firmware
Intel Xeon Platinum 8380
All of the following
Intel Xeon Silver 4309y Firmware
Intel Xeon Silver 4309y
All of the following
Intel Xeon Silver 4310 Firmware
Intel Xeon Silver 4310
All of the following
Intel Xeon Silver 4310t Firmware
Intel Xeon Silver 4310t
All of the following
Intel Xeon Silver 4314 Firmware
Intel Xeon Silver 4314
All of the following
Intel Xeon Silver 4316 Firmware
Intel Xeon Silver 4316
All of the following
Intel Xeon Gold 6330h Firmware
Intel Xeon Gold 6330h
All of the following
Intel Xeon Platinum 8356h Firmware
Intel Xeon Platinum 8356h
All of the following
Intel Xeon Platinum 8360h Firmware
Intel Xeon Platinum 8360h
All of the following
Intel Xeon Platinum 8360hl Firmware
Intel Xeon Platinum 8360hl
All of the following
Intel Xeon Gold 5318h Firmware
Intel Xeon Gold 5318h
All of the following
Intel Xeon Gold 5320h Firmware
Intel Xeon Gold 5320h
All of the following
Intel Xeon Gold 6328h Firmware
Intel Xeon Gold 6328h
All of the following
Intel Xeon Gold 6328hl Firmware
Intel Xeon Gold 6328hl
All of the following
Intel Xeon Gold 6348h Firmware
Intel Xeon Gold 6348h
All of the following
Intel Xeon Platinum 8353h Firmware
Intel Xeon Platinum 8353h
All of the following
Intel Xeon Platinum 8354h Firmware
Intel Xeon Platinum 8354h
All of the following
Intel Xeon Platinum 8376h Firmware
Intel Xeon Platinum 8376h
All of the following
Intel Xeon Platinum 8376hl Firmware
Intel Xeon Platinum 8376hl
All of the following
Intel Xeon Platinum 8380h Firmware
Intel Xeon Platinum 8380h
All of the following
Intel Xeon Platinum 8380hl Firmware
Intel Xeon Platinum 8380hl
All of the following
NetApp Aff C190 Firmware
NetApp Aff C190
All of the following
NetApp Aff A200 Firmware
NetApp Aff A200
All of the following
NetApp Aff A220 Firmware
NetApp Aff A220
All of the following
NetApp Aff A250 Firmware
NetApp Aff A250
All of the following
NetApp Aff A300 Firmware
NetApp Aff A300
All of the following
NetApp Aff A320 Firmware
NetApp Aff A320
All of the following
NetApp Aff A400 Firmware
NetApp Aff A400
All of the following
NetApp Aff A700 Firmware
NetApp Aff A700
All of the following
NetApp Aff A700s Firmware
NetApp AFF A700s
All of the following
NetApp Aff A800 Firmware
NetApp Aff A800
All of the following
NetApp Aff A900 Firmware
NetApp Aff A900
All of the following
NetApp Fas500f Firmware
NetApp Fas500f
All of the following
NetApp Fas2600 Firmware
NetApp Fas2600
All of the following
NetApp Fas2700 Firmware
NetApp Fas2700
All of the following
NetApp Fas8200 Firmware
NetApp Fas8200
All of the following
NetApp Fas8300 Firmware
NetApp Fas8300
All of the following
NetApp Fas8700 Firmware
NetApp Fas8700
All of the following
NetApp Fas9000 Firmware
NetApp Fas9000
All of the following
NetApp Fas9500 Firmware
NetApp Fas9500
Event History
Aug 18, 2022
CVE Published
via MITRE·07:58 PM
Data Sourced
via MITRE·07:58 PM
DescriptionWeakness
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-33060?
CVE-2021-33060 has been assigned a CVSS score that indicates a moderate severity level due to its potential for local privilege escalation.
2
How do I fix CVE-2021-33060?
To fix CVE-2021-33060, it is recommended to update the BIOS firmware for the affected Intel processors to the latest version provided by Intel.
3
Who is affected by CVE-2021-33060?
CVE-2021-33060 affects certain Intel Xeon processors' BIOS firmware, which may allow an authenticated user to escalate privileges.
4
What type of vulnerability is CVE-2021-33060?
CVE-2021-33060 is classified as an out-of-bounds write vulnerability in the BIOS firmware of affected Intel processors.
5
Can CVE-2021-33060 be exploited remotely?
CVE-2021-33060 requires local access for exploitation, as it is specifically a local privilege escalation vulnerability.