Vulnerability Description
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Active Management Technology Software Development Kit | < 16.0.3 |
| Intel | Setup And Configuration Software | < 12.2 |
| Intel | Management Engine Bios Extension | < 15.0.0.0004 |
| Intel | B560 | - |
| Intel | H510 | - |
| Intel | H570 | - |
| Intel | Q570 | - |
| Intel | W580 | - |
| Intel | Z590 | - |
| Intel | B460 | - |
| Intel | H410 | - |
| Intel | H420E | - |
| Intel | H470 | - |
| Intel | Q470 | - |
| Intel | Q470E | - |
| Intel | W480 | - |
| Intel | W480E | - |
| Intel | Z490 | - |
| Intel | C242 | - |
| Intel | C246 | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.PatchVendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.PatchVendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.PatchVendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.PatchVendor Advisory
FAQ
What is CVE-2021-33107?
CVE-2021-33107 is a vulnerability with a CVSS score of 4.6 (MEDIUM). Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0...
How severe is CVE-2021-33107?
CVE-2021-33107 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-33107?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Active Management Technology Software Development Kit, Intel Setup And Configuration Software, Intel Management Engine Bios Extension, Intel B560, Intel H510.