CVE-2021-33104

MEDIUM

Intel One Boot Flash Update < 14.1.28 - Authenticated Denial of Service via Local Access

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2021-33104. PoCs published by rjt-gupta.

AI-analyzed exploit summary The repository contains only a README with a brief description and a link to Intel's advisory for CVE-2021-33104, an improper access control vulnerability in Intel(R) OFU software before version 14.1.28. No exploit code, technical analysis, or additional details are provided.

Description

Improper access control in the Intel(R) OFU software before version 14.1.28 may allow an authenticated user to potentially enable denial of service via local access.

Exploits (1)

nomisec STUB 3 stars

by rjt-gupta · poc

https://github.com/rjt-gupta/CVE-2021-33104

View Code ZIP pw:eip

The repository contains only a README with a brief description and a link to Intel's advisory for CVE-2021-33104, an improper access control vulnerability in Intel(R) OFU software before version 14.1.28. No exploit code, technical analysis, or additional details are provided.

Classification

Stub 90%

Attack Type

Other

Complexity

Trivial

Reliability

Theoretical

Target: Intel(R) OFU software before version 14.1.28

No auth needed

Prerequisites: none

devstral-2 · analyzed Feb 18, 2026 Full analysis →

References (1)

Core 1

Core References

Vendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html

Scores

CVSS v3 6.5

EPSS 0.0031

EPSS Percentile 22.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

Status published

Products (1)

intel/one_boot_flash_update < 14.1.28

Published Feb 16, 2023

Tracked Since Feb 18, 2026