CVE-2021-33117

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	Intel(R) Xeon(R) Scalable Processors	See references

References

https://security.netapp.com/advisory/ntap-20220818-0001/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.htmlVendor Advisory
https://security.netapp.com/advisory/ntap-20220818-0001/Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.htmlVendor Advisory

Timeline

Published: May 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-331187.8Improper access control in the software installer for the Intel(R) Serial IO driver for Intel(R) NUC 11 Gen before version 30.100.2104.1 may CVE-2021-331195.5Improper access control in the Intel(R) RealSense(TM) DCM before version 20210625 may allow an authenticated user to potentially enable info CVE-2021-33126.5An XML external entity (XXE) vulnerability in Alkacon OpenCms 11.0, 11.0.1 and 11.0.2 allows remote authenticated users with edit privileges CVE-2021-331205.4Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated CVE-2021-331227.8Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aes CVE-2021-331237.8Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable CVE-2021-331246.7Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aes CVE-2021-331264.4Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 CVE-2021-331284.4Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to po CVE-2021-331297.8Incorrect default permissions in the software installer for the Intel(R) Advisor before version 2021.4.0 may allow an authenticated user to CVE-2021-33135.4Plone CMS until version 5.2.4 has a stored Cross-Site Scripting (XSS) vulnerability in the user fullname property and the file upload functi CVE-2021-331304.6Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated use