PT-2022-2952 · Intel · Intel Trace Hub

Dmitry Sklyarov + 2 · Published 2022-03-08 · Updated 2023-08-08 · CVE-2021-33150

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Trace Hub (affected versions not specified)

Description The issue is related to insufficient access control in the Intel(R) Trace Hub driver, which may allow an attacker to escalate privileges. For some Intel(R) Trace Hub instances, it is possible to activate test or debug logic at runtime, potentially enabling an unauthenticated user with physical access to escalate privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2022-03554

CVE-2021-33150

Affected Products

Intel Trace Hub

References · 3

• https://bdu.fstec.ru/vul/2022-03554 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-33150 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00609.html · Vendor Advisory