PT-2022-3830 · Intel · Intel Ssd+2

Published 2022-05-10 · Updated 2022-07-12 · CVE-2021-33077

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel(R) SSD versions (affected versions not specified) Intel(R) Optane(TM) SSD versions (affected versions not specified) Intel(R) SSD DC Products versions (affected versions not specified)

Description The issue is related to insufficient control flow management in the firmware of certain Intel SSD products, which may allow an unauthenticated user to potentially enable escalation of privilege via physical access. This could be exploited by an attacker to gain elevated privileges.

Recommendations For Intel(R) SSD: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Intel(R) Optane(TM) SSD: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Intel(R) SSD DC Products: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-670

Related Identifiers

BDU:2022-04629

CVE-2021-33077

Affected Products

Intel Optane Ssd

Intel Ssd

Intel Ssd Dc Products

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2021-33077 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33077 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04629 · Security Note
• https://cve.circl.lu/cve/CVE-2021-33077 · Note
• https://t.me/cibsecurity/42501 · Telegram Post