CVE-2021-33120 : Out of bounds read under complex microarchitectural condition in memory subsyste

Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.

Published 2022-02-09 23:15:16

Updated 2022-02-15 17:50:25

Source Intel Corporation

View at NVD, CVE.org

Vulnerability category: Denial of serviceInformation leak

Products affected by CVE-2021-33120

Intel » Pentium J6425 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_j6425_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium J6425 » Version: N/A
Intel » Pentium N6415 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_n6415_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium N6415 » Version: N/A
Intel » Celeron J6413 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_j6413_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron J6413 » Version: N/A
Intel » Celeron N6211 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n6211_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N6211 » Version: N/A
Intel » Celeron N4505 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n4505_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N4505 » Version: N/A
Intel » Celeron N4500 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n4500_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N4500 » Version: N/A
Intel » Celeron N5105 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n5105_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N5105 » Version: N/A
Intel » Celeron N5100 Firmware » Version: N/A
cpe:2.3:o:intel:celeron_n5100_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Celeron N5100 » Version: N/A
Intel » Pentium Silver N6005 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_silver_n6005_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium Silver N6005 » Version: N/A
Intel » Pentium Silver N6000 Firmware » Version: N/A
cpe:2.3:o:intel:pentium_silver_n6000_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Pentium Silver N6000 » Version: N/A
Intel » Atom P5942b Firmware » Version: N/A
cpe:2.3:o:intel:atom_p5942b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom P5942b » Version: N/A
Intel » Atom P5931b Firmware » Version: N/A
cpe:2.3:o:intel:atom_p5931b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom P5931b » Version: N/A
Intel » Atom P5962b Firmware » Version: N/A
cpe:2.3:o:intel:atom_p5962b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom P5962b » Version: N/A
Intel » Atom P5921b Firmware » Version: N/A
cpe:2.3:o:intel:atom_p5921b_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom P5921b » Version: N/A
Intel » Xeon D1700 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_d1700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon D1700 » Version: N/A
Intel » Xeon D2700 Firmware » Version: N/A
cpe:2.3:o:intel:xeon_d2700_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Xeon D2700 » Version: N/A
Intel » Core I5-l16g7 Firmware » Version: N/A
cpe:2.3:o:intel:core_i5-l16g7_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I5-l16g7 » Version: N/A
Intel » Core I3-l13g4 Firmware » Version: N/A
cpe:2.3:o:intel:core_i3-l13g4_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Core I3-l13g4 » Version: N/A
Intel » Atom X6413e Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6413e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6413e » Version: N/A
Intel » Atom X6425re Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6425re_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6425re » Version: N/A
Intel » Atom X6427fe Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6427fe_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6427fe » Version: N/A
Intel » Atom X6212re Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6212re_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6212re » Version: N/A
Intel » Atom X6200fe Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6200fe_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6200fe » Version: N/A
Intel » Atom X6211e Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6211e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6211e » Version: N/A
Intel » Atom X6425e Firmware » Version: N/A
cpe:2.3:o:intel:atom_x6425e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Atom X6425e » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-33120

EPSS FAQ

0.06%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 23 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-33120

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
5.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:N/A:P	8.0	4.9	NIST
Access Vector: Network Access Complexity: Low Authentication: Single Confidentiality Impact: Partial Integrity Impact: None Availability Impact: Partial
5.4	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L	2.8	2.5	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: Low Integrity: None Availability: Low

CWE ids for CVE-2021-33120

CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2021-33120

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html

INTEL-SA-00589
Mitigation;Vendor Advisory

Jump to

Vulnerability Details : CVE-2021-33120

Products affected by CVE-2021-33120

Exploit prediction scoring system (EPSS) score for CVE-2021-33120

CVSS scores for CVE-2021-33120

CWE ids for CVE-2021-33120

References for CVE-2021-33120