CWE
212
Advisory Published
Updated

CVE-2021-33080

First published: Thu May 12 2022(Updated: )

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

Credit: secure@intel.com

Affected SoftwareAffected VersionHow to fix
Intel Optane Ssd Dc P4800x Firmware<e2010600
Intel Optane Ssd Dc P4800x
Intel Optane Ssd Dc P4801x Firmware<e2010600
Intel Optane Ssd Dc P4801x
Intel Optane Ssd P5800x Firmware<l0310200
Intel Optane Ssd P5800x
Intel Optane Memory H20 With Solid State Storage Firmware<pgf028k
Intel Optane Memory H20 With Solid State Storage
Intel Optane Memory H10 With Solid State Storage Firmware<tgf061k
Intel Optane Memory H10 With Solid State Storage
Intel Optane Ssd 905p Firmware<fw600
Intel Optane Ssd 905p
Intel Optane Ssd 900p Firmware<fw600
Intel Optane Ssd 900p

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is the severity of CVE-2021-33080?

    The severity of CVE-2021-33080 is medium with a CVSS score of 6.8.

  • Which Intel products are affected by CVE-2021-33080?

    Some Intel(R) SSD DC, Intel(R) Optane(TM) SSD, and Intel(R) Optane(TM) SSD DC Products are affected by CVE-2021-33080.

  • What is the vulnerability description of CVE-2021-33080?

    CVE-2021-33080 is the exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD, and Intel(R) Optane(TM) SSD DC Products.

  • How can an unauthenticated user exploit CVE-2021-33080?

    An unauthenticated user can potentially enable information disclosure or escalation of privilege via physical access to the affected Intel products.

  • Are there any fixes available for CVE-2021-33080?

    Please refer to the advisories provided by Intel for information on available fixes and mitigations for CVE-2021-33080.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203