What’s Vulnerable › Vulnerabilities

CVE-2021-33107

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-09 · updated 2026-06-17
• Weakness: CWE-522

Description

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Affected products

• Intel Active Management Technology Software Development Kit: before 16.0.3 — fixed in 16.0.3
• Intel Core I3-1000G1 Firmware: all versions
• Intel Core I3-1000G4 Firmware: all versions
• Intel Core I3-1000Ng4 Firmware: all versions
• Intel Core I3-1005G1 Firmware: all versions
• Intel Core I3-10100 Firmware: all versions
• Intel Core I3-10100E Firmware: all versions
• Intel Core I3-10100F Firmware: all versions
• Intel Core I3-10100T Firmware: all versions
• Intel Core I3-10100Te Firmware: all versions
• Intel Core I3-10100Y Firmware: all versions
• Intel Core I3-10105 Firmware: all versions
• Intel Core I3-10105F Firmware: all versions
• Intel Core I3-10105T Firmware: all versions
• Intel Core I3-10110U Firmware: all versions
• Intel Core I3-10110Y Firmware: all versions
• Intel Core I3-10300 Firmware: all versions
• Intel Core I3-10300T Firmware: all versions
• Intel Core I3-10305 Firmware: all versions
• Intel Core I3-10305T Firmware: all versions
• Intel Core I3-10320 Firmware: all versions
• Intel Core I3-10325 Firmware: all versions
• Intel Core I3 8100 Firmware: all versions
• Intel Core I3 8100F Firmware: all versions
• Intel Core I3 8100T Firmware: all versions
• Intel Core I3 8300 Firmware: all versions
• Intel Core I3 8300T Firmware: all versions
• Intel Core I3 8350K Firmware: all versions
• Intel Core I3 9100 Firmware: all versions
• Intel Core I3 9100F Firmware: all versions

How to fix

Upgrade to a fixed version: Intel Active Management Technology Software Development Kit 16.0.3. Check the vendor advisory for mitigations.

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00575.html
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html

Get alerted when CVE-2021-33107 or the next vulnerability affects your stack