Race Condition in Intel Optane SSDs and DC Products
CVE-2021-33075

4.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Optane(tm) Ssd, Intel(r) Optane(tm) Ssd Dc And Intel(r) Ssd Dc Products
Vendor
CVE Published:
12 May 2022

What is CVE-2021-33075?

A race condition vulnerability exists in the firmware of Intel Optane SSD, Intel Optane SSD DC, and Intel SSD DC Products. This issue may allow a privileged user to execute a denial of service attack by leveraging local access. Proper mitigation strategies should be implemented to address this vulnerability and prevent potential disruptions to system availability.

Affected Version(s)

Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products See references

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC
https://www.solidigm.com/content/dam/newco-aem-site/maste...
x_refsource_MISC

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.