{"id":"CVE-2021-33080","aliases":["EUVD-2021-19795","GHSA-qmqw-hp6j-fxqv"],"status":"published","title":"Exposure of sensitive system information due to uncleared debug information in firmware for some...","description":"Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00263,"percentile":0.18283,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-212"],"published":"2022-05-12T16:35:57Z","modified":"2026-06-17T03:54:07Z","products":[{"vendor":"intel","product":"optane_memory_h10_with_solid_state_storage_firmware"},{"vendor":"intel","product":"optane_memory_h20_with_solid_state_storage_firmware"},{"vendor":"intel","product":"optane_ssd_900p_firmware"},{"vendor":"intel","product":"optane_ssd_905p_firmware"},{"vendor":"intel","product":"optane_ssd_dc_p4800x_firmware"},{"vendor":"intel","product":"optane_ssd_dc_p4801x_firmware"},{"vendor":"intel","product":"optane_ssd_p5800x_firmware"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","tags":["x_refsource_MISC","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf","tags":["x_refsource_MISC","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33080"},{"url":"https://github.com/advisories/GHSA-qmqw-hp6j-fxqv"}],"sources":{"cve":[{"id":"CVE-2021-33080","description":"Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.","status":"published","published":"2022-05-12T16:35:57Z","modified":"2025-05-05T16:51:45.531Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"adp"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:33:10.555814Z"}],"euvd":[{"id":"EUVD-2021-19795","description":"Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.","status":"published","published":"2022-05-12T16:35:57Z","modified":"2025-05-05T16:51:45Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:56.053822Z"}],"ghsa":[{"id":"GHSA-qmqw-hp6j-fxqv","title":"Exposure of sensitive system information due to uncleared debug information in firmware for some...","description":"Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.","status":"published","published":"2022-05-13T00:00:46Z","modified":"2023-01-28T05:06:45Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:44:27.774415Z"}],"nvd":[{"id":"CVE-2021-33080","description":"Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.","status":"published","published":"2022-05-12T17:15:09.087Z","modified":"2026-06-17T03:54:07.267Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"primary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-212"],"updated_at":"2026-11-02T14:07:06.029737Z"}]}}