Improper Access Control Vulnerability in Intel OFU Software
CVE-2021-33104
6.5MEDIUM
Key Information:
- Vendor
Intel
- Status
- Vendor
- CVE Published:
- 16 February 2023
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2021-33104?
An improper access control vulnerability exists in the Intel OFU software, allowing authenticated users to exploit local access and enable a denial of service. This flaw affects versions prior to 14.1.28 and poses a risk for systems using the software, making it essential for users to update to the latest version to mitigate any potential threats.
Affected Version(s)
Intel(R) OFU software before version 14.1.28
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.