Medium severity · published Feb 9, 2022
CVE-2021-33120
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information…
5.4
CVSS
1%
EPSS
No
On KEV
Description
Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AP
Atom P5921b Firmware · Intel
All versions, or not specified · source: NVD
AP
Atom P5931b Firmware · Intel
All versions, or not specified · source: NVD
AP
Atom P5942b Firmware · Intel
All versions, or not specified · source: NVD
AP
Atom P5962b Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6200fe Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6211e Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6212re Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6413e Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6425e Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6425re Firmware · Intel
All versions, or not specified · source: NVD
AX
Atom X6427fe Firmware · Intel
All versions, or not specified · source: NVD
CJ
Celeron J6413 Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33120
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33120
Mitigation
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html
More from Atom P5921b Firmware
6.8
CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable…