Medium severity · published Feb 9, 2022
CVE-2021-33147
Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access
5.5
CVSS
0.2%
EPSS
No
On KEV
Description
Improper conditions check in the Intel(R) IPP Crypto library before version 2021.2 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Integrated Performance Primitives Cryptography · Intel
before 2021.2 · source: NVD
Affected product
IP
Integrated Performance Primitives Cryptography
Intel
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-33147
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-33147
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00600.html
More from Integrated Performance Primitives Cryptography
7.8
CVE-2024-21784
Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local…
7.8
CVE-2023-35121
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow authenticated user…
7.8
CVE-2023-22355
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable…
7.5
CVE-2022-26083
Generation of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information…
6.0
CVE-2023-29162
Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privileged user to…