CVE-2021-33083

MEDIUM

Intel Optane SSD and SSD DC Firmware - Improper Authentication

Title source: llm

Description

Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.

References (2)

Core 2

Core References

Mitigation, Vendor Advisory x_refsource_misc

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html

Broken Link x_refsource_misc

https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf

Scores

CVSS v3 4.4

EPSS 0.0006

EPSS Percentile 20.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-287

Status published

Products (7)

intel/optane_memory_h10_with_solid_state_storage_firmware < tgf061k

intel/optane_memory_h20_with_solid_state_storage_firmware < pgf028k

intel/optane_ssd_900p_firmware < fw600

intel/optane_ssd_905p_firmware < fw600

intel/optane_ssd_dc_p4800x_firmware < e2010600

intel/optane_ssd_dc_p4801x_firmware < e2010600

intel/optane_ssd_p5800x_firmware < l0310200

Published May 12, 2022

Tracked Since Feb 18, 2026