PT-2022-3031 · Intel · Intel Ssd Dc+1
Published
2022-05-10
·
Updated
2022-10-06
·
CVE-2021-33075
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Intel(R) Optane(TM) SSD versions (affected versions not specified)
Intel(R) Optane(TM) SSD DC versions (affected versions not specified)
Intel(R) SSD DC versions (affected versions not specified)
Description
A race condition in the firmware of some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC, and Intel(R) SSD DC products may allow a privileged user to potentially enable denial of service via local access. This issue is related to concurrent execution using a shared resource with incorrect synchronization, which can be exploited by an attacker to cause a denial of service.
Recommendations
For Intel(R) Optane(TM) SSD, consider disabling access to the vulnerable firmware until a patch is available.
For Intel(R) Optane(TM) SSD DC, restrict local access to minimize the risk of exploitation until a fix is provided.
For Intel(R) SSD DC, as a temporary workaround, limit privileged user access to prevent potential denial of service attacks until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Race Condition
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Optane Ssd
Intel Ssd Dc