CVE-2021-33080

Severity: medium (CVSS 6.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-05-12 · updated 2026-06-17
Weakness: CWE-212

Description

Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.

Affected products

Intel Optane Memory H10 With Solid State Storage Firmware: before tgf061k — fixed in tgf061k
Intel Optane Memory H20 With Solid State Storage Firmware: before pgf028k — fixed in pgf028k
Intel Optane Ssd 900P Firmware: before fw600 — fixed in fw600
Intel Optane Ssd 905P Firmware: before fw600 — fixed in fw600
Intel Corporation Intel(R) Optane(TM) SSD DC P4800X: before e2010600 — fixed in e2010600
Intel Optane Ssd Dc P4801X Firmware: before e2010600 — fixed in e2010600
Intel Optane Ssd P5800X Firmware: before l0310200 — fixed in l0310200

How to fix

Upgrade to a fixed version: Intel Optane Memory H10 With Solid State Storage Firmware tgf061k; Intel Optane Memory H20 With Solid State Storage Firmware pgf028k; Intel Optane Ssd 900P Firmware fw600; Intel Optane Ssd 905P Firmware fw600; Intel Corporation Intel(R) Optane(TM) SSD DC P4800X e2010600; Intel Optane Ssd Dc P4801X Firmware e2010600; Intel Optane Ssd P5800X Firmware l0310200. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-33080 or the next vulnerability affects your stack