CVE-2021-33107

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0...

4.6 Medium

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Attack profile

How easy it is to exploit

Attack vector: Physical
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: None
Availability: None

Exploit likelihood

0.25%Down 0.6 points since Feb 10, 2022

What each source reports

NVD Score used 4.6

Record: CVE-2021-33107
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0: 2.1 LowAV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness: CWE-522
Updated: 2026-11-02

CVE List 4.6

Record: CVE-2021-33107
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-522
Updated: 2026-11-02

EUVDEUVD-2021-19822 4.6

Record: EUVD-2021-19822
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Updated: 2026-11-02

GitHub AdvisoriesGHSA-343q-2m8h-67wf 4.6

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0...

Record: GHSA-343q-2m8h-67wf
CVSS 3.1: 4.6 MediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness: CWE-522
Updated: 2026-11-02

Affected products

Show 168 moreShow less

History

History
Recorded	Changed	Sources
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-33107 is a medium vulnerability (CVSS 4.6) in Intel Active Management Technology Software Development Kit, published February 9, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 16th percentile. No source names a fixed version.