6.8

CVE-2021-33080

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Optane Ssd Dc P4800x Firmware Version < e2010600
   Intel ≫ Optane Ssd Dc P4800x Version-
Intel ≫ Optane Ssd Dc P4801x Firmware Version < e2010600
   Intel ≫ Optane Ssd Dc P4801x Version-
Intel ≫ Optane Ssd P5800x Firmware Version < l0310200
   Intel ≫ Optane Ssd P5800x Version-
Intel ≫ Optane Ssd 905p Firmware Version < fw600
   Intel ≫ Optane Ssd 905p Version-
Intel ≫ Optane Ssd 900p Firmware Version < fw600
   Intel ≫ Optane Ssd 900p Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.35% 0.57
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
134c704f-9b21-4f2e-91b3-4a467353bcc0 6.8 0.9 5.9
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer

The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.