ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2021-33107

—
CVSS 3.1
4.6 medium
EPSS
<1%p16
Published
()
Modified
Description

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Vendors
intel
Products
active management technology software development kit, setup and configuration software, management engine bios extension, core i3 firmware, core i3-1000g1 firmware, core i3-1000g4 firmware, core i3-1000ng4 firmware, core i3-1005g1 firmware, core i3-10100 firmware, core i3-10100e firmware, core i3-10100f firmware, core i3-10100t firmware
Weakness
CWE-522
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

No ingested article mentions this CVE yet.