medium4.6
CVE-2021-33107
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before …
Impact
Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Active Management Technology Software Development Kit | before 16.0.3 |
| Intel | Setup And Configuration Software | before 12.2 |
| Intel | Management Engine Bios Extension | before 15.0.0.0004 before 14.0.0.0004 before 12.0.0.0011 before 11.0.0.0012 |
| Intel | Core I3 Firmware | All versions |
| Intel | Core I3-1000g1 Firmware | All versions |
| Intel | Core I3-1000g4 Firmware | All versions |
| Intel | Core I3-1000ng4 Firmware | All versions |
| Intel | Core I3-1005g1 Firmware | All versions |
| Intel | Core I3-10100 Firmware | All versions |
| Intel | Core I3-10100e Firmware | All versions |
| Intel | Core I3-10100f Firmware | All versions |
| Intel | Core I3-10100t Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html