CVE-2021-33068

MEDIUM

Intel Active Management Technology Firmware < 15.0.35 - Authenticated Denial of Service via Null Pointer Dereference

Title source: llm

Description

Null pointer dereference in subsystem for Intel(R) AMT before versions 15.0.35 may allow an authenticated user to potentially enable denial of service via network access.

References (2)

Core 2

Core References

Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00470.html

Third Party Advisory x_refsource_confirm

https://security.netapp.com/advisory/ntap-20220210-0006/

Scores

CVSS v3 6.5

EPSS 0.0045

EPSS Percentile 63.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-476

Status published

Products (2)

intel/active_management_technology_firmware < 15.0.35

netapp/cloud_backup

Published Feb 09, 2022

Tracked Since Feb 18, 2026