{"id":"CVE-2021-33077","aliases":["EUVD-2021-19792","GHSA-fpf8-xccp-3wqf"],"status":"published","title":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD...","description":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00268,"percentile":0.19062,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2022-05-12T16:35:56Z","modified":"2026-06-17T03:54:06Z","products":[{"vendor":"intel","product":"optane_memory_h10_with_solid_state_storage_firmware"},{"vendor":"intel","product":"optane_memory_h20_with_solid_state_storage_firmware"},{"vendor":"intel","product":"optane_ssd_900p_firmware"},{"vendor":"intel","product":"optane_ssd_905p_firmware"},{"vendor":"intel","product":"optane_ssd_dc_p4800x_firmware"},{"vendor":"intel","product":"optane_ssd_dc_p4801x_firmware"},{"vendor":"intel","product":"optane_ssd_p5800x_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33077"},{"url":"https://github.com/advisories/GHSA-fpf8-xccp-3wqf"}],"sources":{"cve":[{"id":"CVE-2021-33077","description":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2022-05-12T16:35:56Z","modified":"2025-05-05T16:52:05.619Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"updated_at":"2026-11-02T14:33:10.204494Z"}],"euvd":[{"id":"EUVD-2021-19792","description":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2022-05-12T16:35:56Z","modified":"2025-05-05T16:52:05Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-fpf8-xccp-3wqf","title":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD...","description":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2022-05-13T00:00:46Z","modified":"2023-02-01T05:02:23Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:49:53.83549Z"}],"nvd":[{"id":"CVE-2021-33077","description":"Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.","status":"published","published":"2022-05-12T17:15:09.003Z","modified":"2026-06-17T03:54:06.703Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:07:06.029737Z"}]}}