PT-2022-3025 · Intel · Intel Ssd Dc+2

Published

2022-05-10

·

Updated

2022-10-06

·

CVE-2021-33074

CVSS v2.0

4.9

Medium

VectorAV:L/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions Intel(R) SSD versions (affected versions not specified) Intel(R) SSD DC versions (affected versions not specified) Intel(R) Optane(TM) SSD versions (affected versions not specified)
Description The issue is related to a protection mechanism failure in the firmware of some Intel SSD products, which may allow an unauthenticated user to potentially enable information disclosure via physical access. This is due to a lack of protection for service data. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.
Recommendations For Intel(R) SSD, consider restricting physical access to the device until a patch is available. For Intel(R) SSD DC, avoid using the device for sensitive data storage until the issue is resolved. For Intel(R) Optane(TM) SSD, as a temporary workaround, consider disabling the device or restricting its use to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Improper Authentication

Weakness Enumeration

CWE-693CWE-287

Related Identifiers

BDU:2022-03691
CVE-2021-33074

Affected Products

Intel Optane Ssd
Intel Ssd
Intel Ssd Dc