CVE-2021-33077

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products	See references

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.htmlMitigation, Vendor Advisory

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-330784.7Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to pote CVE-2021-330794.4Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information dis CVE-2021-33085.5An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the CVE-2021-330806.8Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD an CVE-2021-330814.4Protection mechanism failure in firmware for some Intel(R) SSD DC Products may allow a privileged user to potentially enable information dis CVE-2021-330824.6Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow CVE-2021-330834.4Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products CVE-2021-330865.5Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local acc CVE-2021-330875.5Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may a CVE-2021-330887.8Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.44 CVE-2021-330897.8Improper access control in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE, NUC8i7BE before ver CVE-2021-33098.1packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Aut