CVE-2021-33076
Medium
Description
Improper authentication in firmware for some Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
SeverityMedium
CVSS5.3
Exploit probability—
ProductIntel Ssd 600p Firmware
PublishedSep 20, 2022
First seenSep 20, 2022
Weakness typeCWE-287Improper authentication
How to fix
Update
- intel ssd_600p_firmware122c or later
- intel ssd_660p_firmware005c or later
- intel ssd_665p_firmware002c or later
- intel ssd_670p_firmware003c or later
- intel ssd_700p_firmware005c or later
- intel ssd_760p_firmware006c or later
- intel ssd_d3-s4510_m.2_firmwarexc311132 or later
- intel ssd_dc_p4510_sff_firmwarevdv10184 or later
- intel ssd_d3-s4610_m.2_firmwarexc311132 or later
- intel ssd_dc_p4610_sff_firmwarevdv10184 or later
- intel ssd_d5-p4326_firmware8dv1md58 or later
- intel ssd_d5-p5316_firmwareacv10200 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel ssd_600p_firmware | v < 122c | 122c |
| intel ssd_660p_firmware | v < 005c | 005c |
| intel ssd_665p_firmware | v < 002c | 002c |
| intel ssd_670p_firmware | v < 003c | 003c |
| intel ssd_700p_firmware | v < 005c | 005c |
| intel ssd_760p_firmware | v < 006c | 006c |
| intel ssd_d3-s4510_m.2_firmware | v < xc311132 | xc311132 |
| intel ssd_dc_p4510_sff_firmware | v < vdv10184 | vdv10184 |
| intel ssd_d3-s4610_m.2_firmware | v < xc311132 | xc311132 |
| intel ssd_dc_p4610_sff_firmware | v < vdv10184 | vdv10184 |
| intel ssd_d5-p4326_firmware | v < 8dv1md58 | 8dv1md58 |
| intel ssd_d5-p5316_firmware | v < acv10200 | acv10200 |
| intel ssd_d7_p5510_firmware | v < jcv10200 | jcv10200 |
| intel ssd_d7_p5600_firmware | No range specified | — |
| intel ssd_dc_d4512_firmware | v < vpv1et0k | vpv1et0k |
| intel ssd_dc_p3100_firmware | v < 119d | 119d |
| intel ssd_dc_p4101_firmware | v < 009d | 009d |
| intel ssd_dc_p4500_firmware | v < qdv101b1 | qdv101b1 |
| intel ssd_dc_p4501_firmware | v < qdv101b1 | qdv101b1 |
| intel ssd_dc_p4510_edsff_firmware | v < vev10284 | vev10284 |
| intel ssd_dc_p4511_edsff_firmware | v < vev10284 | vev10284 |
| intel ssd_dc_p4511_m.2_firmware | v < vdc1lz37 | vdc1lz37 |
| intel ssd_dc_p4600_firmware | v < qdv101b1 | qdv101b1 |
| intel ssd_dc_p4608_firmware | v < qdv101b1 | qdv101b1 |
| intel ssd_dc_s4500_firmware | v < scv10150 | scv10150 |
| intel ssd_dc_s4600_firmware | v < scv10150 | scv10150 |
| intel ssd_e_6000p_firmware | v < 122e | 122e |
| intel ssd_e_6100p_firmware | v < 006e | 006e |
| intel ssd_pro_6000p_firmware | v < 132p | 132p |
| intel ssd_pro_7600p_firmware | v < 006p | 006p |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.