CVE-2021-33086

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-11-17 · updated 2026-06-17
Weakness: CWE-787

Description

Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of service via local access.

Affected products

Intel Nuc 10 Performance Kit Nuc10I3Fnh Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I3Fnhf Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I3Fnhfa Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I3Fnhja Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I3Fnk Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnh Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnhca Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnhf Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnhj Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnhja Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnk Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnkp Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I5Fnkpa Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnh Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnhaa Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnhc Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnhja Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnk Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnkp Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 10 Performance Kit Nuc10I7Fnkpa Firmware: before fncml.0052 — fixed in fncml.0052
Intel Nuc 11 Compute Element Cm11Ebc4W Firmware: before ebtgl357.0056 — fixed in ebtgl357.0056
Intel Nuc 11 Compute Element Cm11Ebi38W Firmware: before ebtgl357.0056 — fixed in ebtgl357.0056
Intel Nuc 11 Compute Element Cm11Ebi58W Firmware: before ebtgl357.0056 — fixed in ebtgl357.0056
Intel Nuc 11 Compute Element Cm11Ebi716W Firmware: before ebtgl357.0056 — fixed in ebtgl357.0056
Intel Nuc 11 Enthusiast Kit Nuc11Phki7C Firmware: before phtgl579.0062 — fixed in phtgl579.0062
Intel Nuc 11 Enthusiast Mini Pc Nuc11Phki7Caa Firmware: before phtgl579.0062 — fixed in phtgl579.0062
Intel Nuc 11 Performance Kit Nuc11Pahi3 Firmware: before patgl357.0040 — fixed in patgl357.0040
Intel Nuc 11 Performance Kit Nuc11Pahi5 Firmware: before patgl357.0040 — fixed in patgl357.0040
Intel Nuc 11 Performance Kit Nuc11Pahi7 Firmware: before patgl357.0040 — fixed in patgl357.0040
Intel Nuc 11 Performance Kit Nuc11Paki3 Firmware: before patgl357.0040 — fixed in patgl357.0040

How to fix

Upgrade to a fixed version: Intel Nuc 10 Performance Kit Nuc10I3Fnh Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I3Fnhf Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I3Fnhfa Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I3Fnhja Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I3Fnk Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnh Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnhca Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnhf Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnhj Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnhja Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnk Firmware fncml.0052; Intel Nuc 10 Performance Kit Nuc10I5Fnkp Firmware fncml.0052. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2021-33086 or the next vulnerability affects your stack