PT-2022-3829 · Intel · Intel Ssd Dc+1

Published 2022-05-10 · Updated 2022-10-07 · CVE-2021-33080

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) SSD DC versions (affected versions not specified) Intel(R) Optane(TM) SSD versions (affected versions not specified) Intel(R) Optane(TM) SSD DC versions (affected versions not specified)

Description The issue is related to the exposure of sensitive system information due to uncleared debug information in firmware for some Intel products. This may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access. The vulnerability is associated with a lack of protection for service data.

Recommendations For Intel(R) SSD DC, update the firmware to a version that clears debug information. For Intel(R) Optane(TM) SSD, update the firmware to a version that clears debug information. For Intel(R) Optane(TM) SSD DC, update the firmware to a version that clears debug information. As a temporary workaround, consider restricting physical access to the devices until a patch is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-212

Related Identifiers

BDU:2022-04628

CVE-2021-33080

Affected Products

Intel Optane Ssd

Intel Ssd Dc

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2021-33080 · Security Note
• https://bdu.fstec.ru/vul/2022-04628 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33080 · Vendor Advisory
• https://t.me/cvenotify/36513 · Telegram Post
• https://solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf · Note
• https://t.me/cvenotify/30123 · Telegram Post
• https://cve.circl.lu/cve/CVE-2021-33080 · Note
• https://t.me/cibsecurity/42503 · Telegram Post