CVE-2021-33107

Medium

Description

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

SeverityMedium
CVSS4.6
Exploit probability—
ProductIntel Active Management Technology Software Development Kit
PublishedFeb 9, 2022
First seenFeb 9, 2022
Weakness typeCWE-522CWE-522

How to fix

Update
  • intel active_management_technology_software_development_kit16.0.3 or later
  • intel setup_and_configuration_software12.2 or later
  • intel management_engine_bios_extension15.0.0.0004, 14.0.0.0004, 12.0.0.0011, 11.0.0.0012 or later

Affected products

ProductAffected versionsFixed in
intel active_management_technology_software_development_kitv < 16.0.316.0.3
intel setup_and_configuration_softwarev < 12.212.2
intel management_engine_bios_extensionv < 15.0.0.0004, v < 14.0.0.0004, v < 12.0.0.0011, v < 11.0.0.001215.0.0.0004, 14.0.0.0004, 12.0.0.0011, 11.0.0.0012
intel core_i3_firmwareNo range specified—
intel core_i3-1000g1_firmwareNo range specified—
intel core_i3-1000g4_firmwareNo range specified—
intel core_i3-1000ng4_firmwareNo range specified—
intel core_i3-1005g1_firmwareNo range specified—
intel core_i3-10100_firmwareNo range specified—
intel core_i3-10100e_firmwareNo range specified—
intel core_i3-10100f_firmwareNo range specified—
intel core_i3-10100t_firmwareNo range specified—
intel core_i3-10100te_firmwareNo range specified—
intel core_i3-10100y_firmwareNo range specified—
intel core_i3-10105_firmwareNo range specified—
intel core_i3-10105f_firmwareNo range specified—
intel core_i3-10105t_firmwareNo range specified—
intel core_i3-10110u_firmwareNo range specified—
intel core_i3-10110y_firmwareNo range specified—
intel core_i3-10300_firmwareNo range specified—
intel core_i3-10300t_firmwareNo range specified—
intel core_i3-10305_firmwareNo range specified—
intel core_i3-10305t_firmwareNo range specified—
intel core_i3-10320_firmwareNo range specified—
intel core_i3-10325_firmwareNo range specified—
intel core_i3_8100_firmwareNo range specified—
intel core_i3_8100f_firmwareNo range specified—
intel core_i3_8100t_firmwareNo range specified—
intel core_i3_8300_firmwareNo range specified—
intel core_i3_8300t_firmwareNo range specified—
intel core_i3_8350k_firmwareNo range specified—
intel core_i3_9100_firmwareNo range specified—
intel core_i3_9100f_firmwareNo range specified—
intel core_i3_9100t_firmwareNo range specified—
intel core_i3_9300_firmwareNo range specified—
intel core_i3_9300t_firmwareNo range specified—
intel core_i3_9320_firmwareNo range specified—
intel core_i3_9350k_firmwareNo range specified—
intel core_i3_9350kf_firmwareNo range specified—
intel core_i5_firmwareNo range specified—
intel core_i5\+8400_firmwareNo range specified—
intel core_i5\+8500_firmwareNo range specified—
intel core_i5-10110y_firmwareNo range specified—
intel core_i5-10200h_firmwareNo range specified—
intel core_i5-10210u_firmwareNo range specified—
intel core_i5-10210y_firmwareNo range specified—
intel core_i5-10300h_firmwareNo range specified—
intel core_i5-1030g4_firmwareNo range specified—
intel core_i5-1030g7_firmwareNo range specified—
intel core_i5-1030ng7_firmwareNo range specified—
intel core_i5-10310u_firmwareNo range specified—
intel core_i5-10310y_firmwareNo range specified—
intel core_i5-1035g1_firmwareNo range specified—
intel core_i5-1035g4_firmwareNo range specified—
intel core_i5-1035g7_firmwareNo range specified—
intel core_i5-1038ng7_firmwareNo range specified—
intel core_i5-10400_firmwareNo range specified—
intel core_i5-10400f_firmwareNo range specified—
intel core_i5-10400h_firmwareNo range specified—
intel core_i5-10400t_firmwareNo range specified—
intel core_i5-10500_firmwareNo range specified—
intel core_i5-10500e_firmwareNo range specified—
intel core_i5-10500h_firmwareNo range specified—
intel core_i5-10500t_firmwareNo range specified—
intel core_i5-10500te_firmwareNo range specified—
intel core_i5-10505_firmwareNo range specified—
intel core_i5-10600_firmwareNo range specified—
intel core_i5-10600k_firmwareNo range specified—
intel core_i5-10600kf_firmwareNo range specified—
intel core_i5-10600t_firmwareNo range specified—
intel core_i5-10610u_firmwareNo range specified—
intel core_i5_10110y_firmwareNo range specified—
intel core_i5_10210y_firmwareNo range specified—
intel core_i5_10310y_firmwareNo range specified—
intel core_i5_8400_firmwareNo range specified—
intel core_i5_8400t_firmwareNo range specified—
intel core_i5_8500_firmwareNo range specified—
intel core_i5_8500t_firmwareNo range specified—
intel core_i5_8600_firmwareNo range specified—
intel core_i5_8600k_firmwareNo range specified—
intel core_i5_8600t_firmwareNo range specified—
intel core_i5_9400_firmwareNo range specified—
intel core_i5_9400f_firmwareNo range specified—
intel core_i5_9400t_firmwareNo range specified—
intel core_i5_9500_firmwareNo range specified—
intel core_i5_9500f_firmwareNo range specified—
intel core_i5_9500t_firmwareNo range specified—
intel core_i5_9600_firmwareNo range specified—
intel core_i5_9600k_firmwareNo range specified—
intel core_i5_9600kf_firmwareNo range specified—
intel core_i5_9600t_firmwareNo range specified—
intel core_i5_l16g7_firmwareNo range specified—
intel core_i5_m480_firmwareNo range specified—
intel core_i7_firmwareNo range specified—
intel core_i7\+8700_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.