PT-2022-3788 · Intel · Intel Realsense Id Solution F450

John Whiteman + 5 · Published 2022-05-10 · Updated 2022-07-12 · CVE-2021-33130

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) RealSense(TM) ID Solution F450 versions prior to 2.6.0.74

Description The issue is related to insecure default variable initialization, which may allow an unauthenticated user to enable information disclosure via physical access. This is due to errors in initialization. Exploitation of the issue may allow an attacker to disclose protected information.

Recommendations For versions prior to 2.6.0.74, update to version 2.6.0.74 or later to resolve the issue.

Fix

Improper Initialization

Weakness Enumeration

CWE-453

CWE-1188

CWE-665

Related Identifiers

BDU:2022-04582

CVE-2021-33130

Affected Products

Intel Realsense Id Solution F450

References · 6

• https://osv.dev/vulnerability/CVE-2021-33130 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-33117 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-33130 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00595.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04582 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html · Note