4.6
CVE-2021-33082
- EPSS 0.37%
- Published 12.05.2022 17:15:09
- Last modified 05.05.2025 17:17:07
- Source secure@intel.com
- Teams watchlist Login
- Open Login
Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.
Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Optane Ssd Dc P4800x Firmware Version < e2010600
Intel ≫ Optane Ssd Dc P4801x Firmware Version < e2010600
Intel ≫ Optane Ssd P5800x Firmware Version < l0310200
Intel ≫ Optane Memory H20 With Solid State Storage Firmware Version < pgf028k
Intel ≫ Optane Memory H10 With Solid State Storage Firmware Version < tgf061k
Intel ≫ Optane Ssd 905p Firmware Version < fw600
Intel ≫ Optane Ssd 900p Firmware Version < fw600
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.37% | 0.583 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 4.6 | 0.9 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 2.1 | 3.9 | 2.9 |
AV:L/AC:L/Au:N/C:P/I:N/A:N
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | 4.6 | 0.9 | 3.6 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer
The product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.