CVE-2021-33117 Information disclosure in Intel(R) Xeon(R) Scalable Processors

What is CVE-2021-33117?

CVE-2021-33117 is a medium-severity vulnerability in Intel(R) Xeon(R) Scalable Processors, published on 12 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.

Which versions are affected by CVE-2021-33117?

It affects 2 products.

Products include Intel Bios, Netapp Fas\/Aff Bios.

How do I fix CVE-2021-33117?

Apply the vendor's patch.

Is CVE-2021-33117 being exploited?

There is no known exploitation of CVE-2021-33117 in the wild and no public exploit code.

Other vulnerabilities in Intel(R) Xeon(R) Scalable Processors

• CVE-2019-14557 Memory corruption in Intel BIOS High 8.0
• CVE-2020-12360 Memory corruption in Intel(R) Processors High 7.8
• CVE-2020-8672 Memory corruption in Intel BIOS Advisory High 7.8
• CVE-2020-8739 Privilege escalation in Intel BIOS platform sample code for some Intel(R) Processors High 7.8
• CVE-2008-7096 Privilege escalation in n/a Medium 6.9

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as DEBIAN-CVE-2021-33117, GHSA-fmf3-xj8j-qrw9, UBUNTU-CVE-2021-33117.