What’s Vulnerable › Vulnerabilities

CVE-2021-33074

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-05-12 · updated 2026-06-17

Description

Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Optane Memory H10 With Solid State Storage Firmware: before tgf061k — fixed in tgf061k
• Intel Optane Memory H20 With Solid State Storage Firmware: before pgf028k — fixed in pgf028k
• Intel Optane Ssd 900P Firmware: before fw600 — fixed in fw600
• Intel Optane Ssd 905P Firmware: before fw600 — fixed in fw600
• Intel Corporation Intel(R) Optane(TM) SSD DC P4800X: before e2010600 — fixed in e2010600
• Intel Optane Ssd Dc P4801X Firmware: before e2010600 — fixed in e2010600
• Intel Optane Ssd P5800X Firmware: before l0310200 — fixed in l0310200

How to fix

Upgrade to a fixed version: Intel Optane Memory H10 With Solid State Storage Firmware tgf061k; Intel Optane Memory H20 With Solid State Storage Firmware pgf028k; Intel Optane Ssd 900P Firmware fw600; Intel Optane Ssd 905P Firmware fw600; Intel Corporation Intel(R) Optane(TM) SSD DC P4800X e2010600; Intel Optane Ssd Dc P4801X Firmware e2010600; Intel Optane Ssd P5800X Firmware l0310200. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
• https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
• https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf

Get alerted when CVE-2021-33074 or the next vulnerability affects your stack