CVE-2021-33080: intel optane_memory_h10_with_solid_state_storage_firmware

Vulnerability summary

CVE-2021-33080 is a medium (CVSS 6.8) vulnerability in intel optane_memory_h10_with_solid_state_storage_firmware. EPSS estimates a 0.26% chance of exploitation in the next 30 days, higher than 17% of scored vulnerabilities.

Timeline

1. 12-05-2022
   PublishedVulnerability first disclosed.
2. 05-05-2025
   Last modifiedVulnerability information updated.

Description

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

• CWE-212Improper Removal of Sensitive Information Before Storage or TransferThe product stores, transfers, or shares a resource that contains sensitive information, but it does not properly remove that information before the product makes the resource available to unauthorized actors.