CVE-2021-33126

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-33126
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before versions 8.5 and 1.5.5 may allow a privileged user to potentially enable denial of service via local access.

4.4 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:ethernet_controller_xxv710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_xxv710:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:intel:ethernet_controller_xl710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_xl710:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:intel:ethernet_controller_v710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_v710:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:intel:ethernet_controller_x710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_x710:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:intel:ethernet_network_adapter_x722da2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da2:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:intel:ethernet_network_adapter_x722da4fh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da4fh:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:intel:ethernet_network_adapter_x722da4g1p5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da4g1p5:-:*:*:*:*:*:*:*
History

26 Aug 2022, 17:23

Type Values Removed Values Added
CPE cpe:2.3:o:intel:ethernet_controller_xl710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da2:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da4fh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_xl710:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_network_adapter_x722da2_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_x710:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_controller_x710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_controller_xxv710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_v710:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_controller_xxv710:-:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_controller_v710_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_network_adapter_x722da4g1p5_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:intel:ethernet_network_adapter_x722da4fh_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:ethernet_network_adapter_x722da4g1p5:-:*:*:*:*:*:*:*
References (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html - (MISC) https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html - Patch, Vendor Advisory
CWE NVD-CWE-Other
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 4.4

18 Aug 2022, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-08-18 20:15

Updated : 2024-02-04 22:51

NVD link : CVE-2021-33126

Mitre link : CVE-2021-33126

CVE.ORG link : CVE-2021-33126

JSON object : View

Products Affected

intel

  • ethernet_controller_xxv710
  • ethernet_controller_x710
  • ethernet_network_adapter_x722da2_firmware
  • ethernet_network_adapter_x722da4fh_firmware
  • ethernet_network_adapter_x722da4fh
  • ethernet_controller_xl710
  • ethernet_network_adapter_x722da2
  • ethernet_network_adapter_x722da4g1p5_firmware
  • ethernet_controller_x710_firmware
  • ethernet_controller_v710
  • ethernet_network_adapter_x722da4g1p5
  • ethernet_controller_xxv710_firmware
  • ethernet_controller_xl710_firmware
  • ethernet_controller_v710_firmware
CWE
NVD-CWE-Other