{"containers": {"cna": {"affected": [{"product": "Intel Atom(R) Processors", "vendor": "n/a", "versions": [{"status": "affected", "version": "See references"}]}], "descriptions": [{"lang": "en", "value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."}], "problemTypes": [{"descriptions": [{"description": " information disclosure or cause denial of service ", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-02-09T22:04:42.000Z", "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2021-33120", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Intel Atom(R) Processors", "version": {"version_data": [{"version_value": "See references"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": " information disclosure or cause denial of service "}]}]}, "references": {"reference_data": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html", "refsource": "MISC", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:42:19.859Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-125", "lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-04-23T13:21:22.594244Z", "id": "CVE-2021-33120", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-05T16:49:25.748Z"}}]}, "cveMetadata": {"assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "assignerShortName": "intel", "cveId": "CVE-2021-33120", "datePublished": "2022-02-09T22:04:42.000Z", "dateReserved": "2021-05-18T00:00:00.000Z", "dateUpdated": "2025-05-05T16:49:25.748Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T23:42:19.859Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2021-33120", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-23T13:21:22.594244Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-125", "description": "CWE-125 Out-of-bounds Read"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-05T13:14:02.472Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "Intel Atom(R) Processors", "versions": [{"status": "affected", "version": "See references"}]}], "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": " information disclosure or cause denial of service "}]}], "providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2022-02-09T22:04:42.000Z"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "See references"}]}, "product_name": "Intel Atom(R) Processors"}]}, "vendor_name": "n/a"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": " information disclosure or cause denial of service "}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-33120", "STATE": "PUBLIC", "ASSIGNER": "[email protected]"}}}}, "cveMetadata": {"cveId": "CVE-2021-33120", "state": "PUBLISHED", "dateUpdated": "2025-05-05T16:49:25.748Z", "dateReserved": "2021-05-18T00:00:00.000Z", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "datePublished": "2022-02-09T22:04:42.000Z", "assignerShortName": "intel"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_p5942b_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "495F0985-B84C-466E-A239-36A1930E82D2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_p5942b:-:*:*:*:*:*:*:*", "matchCriteriaId": "9D860FEC-BA79-4FEE-A79C-88AA857358E4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_p5931b_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "94AC79B7-2FE6-44A7-BF7F-2698FE2D45E6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_p5931b:-:*:*:*:*:*:*:*", "matchCriteriaId": "31E2104F-0CE3-4B9D-88B3-35D982C36562", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_p5962b_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "516D1139-6858-44E4-8031-62CF96CAE998", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_p5962b:-:*:*:*:*:*:*:*", "matchCriteriaId": "C2CEF8A6-2445-4B63-822D-81F6AC708D62", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_p5921b_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B290BC76-AB87-469E-9F9F-C0ADAA95DEE7", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_p5921b:-:*:*:*:*:*:*:*", "matchCriteriaId": "E6D6CEE1-25DF-43C5-AEBB-49585B64236A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:xeon_d1700_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "141FEA0B-C28D-44D6-8108-B3270DA4B6D2", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:xeon_d1700:-:*:*:*:*:*:*:*", "matchCriteriaId": "D94D7B29-565F-4E62-A958-27FFDDD7399E", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:xeon_d2700_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "78553957-B9D3-4111-B805-6ED8994A5F3F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:xeon_d2700:-:*:*:*:*:*:*:*", "matchCriteriaId": "594DDCAB-96D4-4999-824E-7597B971B6DC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:core_i5-l16g7_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "E03DB0E4-C488-4CE1-B951-6333C313EF05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:core_i5-l16g7:-:*:*:*:*:*:*:*", "matchCriteriaId": "9A4FD69F-FF53-43F4-97C8-40867DB67958", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:core_i3-l13g4_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "10E9EB5B-77FF-462A-A314-6848A6E55918", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:core_i3-l13g4:-:*:*:*:*:*:*:*", "matchCriteriaId": "39FD6F9C-FEEA-4D52-8745-6477B50AFB0C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:pentium_j6425_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C1F254A-E8D9-4AE7-9F66-22604E09FFB6", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:pentium_j6425:-:*:*:*:*:*:*:*", "matchCriteriaId": "D97C7A90-D8C6-4901-BCA1-E40DA173AA9D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:pentium_n6415_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0456F580-EC62-4AA4-8D82-CDDFDD04E41D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:pentium_n6415:-:*:*:*:*:*:*:*", "matchCriteriaId": "638FA431-71EA-4668-AFF2-989A4994ED12", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_j6413_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "101B5BBD-BCA6-42D9-BCC7-5D3BF124BCB9", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_j6413:-:*:*:*:*:*:*:*", "matchCriteriaId": "F7A8BF58-1D33-484A-951C-808443912BE8", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_n6211_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F52F496A-E2E2-48F6-B6CD-99F83A2A211C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_n6211:-:*:*:*:*:*:*:*", "matchCriteriaId": "406E9139-BCFF-406B-A856-57896D27B752", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6413e_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CDAE2B6-8347-4FEE-B98A-F8F44CEA753A", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6413e:-:*:*:*:*:*:*:*", "matchCriteriaId": "1B3348F4-8E2B-42BE-9F3A-48DFF5CE0047", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6425re_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "72EAB882-C018-44BC-A186-41D0A023544B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6425re:-:*:*:*:*:*:*:*", "matchCriteriaId": "7313975C-41A5-4657-8758-1C16F947BE4C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6427fe_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7EBA7169-5D8D-409D-8E87-1727001F824B", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6427fe:-:*:*:*:*:*:*:*", "matchCriteriaId": "2FBE4406-9979-4723-833C-176F051E6389", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6212re_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "501D3EF9-1404-4B2B-B152-5EE2E24FDCFE", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6212re:-:*:*:*:*:*:*:*", "matchCriteriaId": "F85599DD-3F80-4EB0-9753-D24EDD8D76CC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6200fe_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "C1DED3AE-C09C-43F7-B5EF-1C454B8A8711", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6200fe:-:*:*:*:*:*:*:*", "matchCriteriaId": "89231773-9D9B-434A-A6A3-8527C4F6FEBB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6211e_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DC7111D1-0DA1-4C16-9727-35931D50C746", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6211e:-:*:*:*:*:*:*:*", "matchCriteriaId": "A85EA674-2537-4323-AEDA-FA356489E7DE", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:atom_x6425e_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "CE90CE4B-AF89-4C28-B47B-6964CB87FD92", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:atom_x6425e:-:*:*:*:*:*:*:*", "matchCriteriaId": "7F068F4F-8CCD-4218-871C-BEABEB0DAB55", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:pentium_silver_n6005_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "50F37CD3-FE1F-4361-B6E3-070315F0DA83", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:pentium_silver_n6005:-:*:*:*:*:*:*:*", "matchCriteriaId": "42841FAC-A6EC-44F3-9FCD-B4549A783014", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:pentium_silver_n6000_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7CE6B67B-1CD5-4454-AFEF-2965C1798F40", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:pentium_silver_n6000:-:*:*:*:*:*:*:*", "matchCriteriaId": "31282347-8DCB-4B37-A853-DFD9D5AF31EA", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_n4505_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA10274E-8C1C-496C-9D2D-85CFC63746E4", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_n4505:-:*:*:*:*:*:*:*", "matchCriteriaId": "BE7B5E21-2796-4578-998F-B03E26277DE7", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_n4500_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "708CB83F-5155-4079-9887-490D81EDDEB1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_n4500:-:*:*:*:*:*:*:*", "matchCriteriaId": "B54D15DF-53EA-4611-932A-EDB8279F582A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_n5105_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "432FEF5E-6CEE-4B71-A836-CA2BA63E692E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_n5105:-:*:*:*:*:*:*:*", "matchCriteriaId": "AA455AC5-8434-4B59-BE89-E82CDACD2AEC", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:celeron_n5100_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EED20A13-3E8D-4734-82E1-BF811C12C294", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:celeron_n5100:-:*:*:*:*:*:*:*", "matchCriteriaId": "96D6F5D3-3559-47AD-8201-C9D34417DC09", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access."}, {"lang": "es", "value": "Una lectura fuera de l\u00edmites bajo una condici\u00f3n micro arquitect\u00f3nica compleja en el subsistema de memoria para algunos procesadores Intel Atom(R) puede permitir a un usuario autenticado habilitar potencialmente una divulgaci\u00f3n de informaci\u00f3n o causar una denegaci\u00f3n de servicio por medio del acceso a la red"}], "id": "CVE-2021-33120", "lastModified": "2025-05-05T17:17:14.277", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 5.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "[email protected]", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-02-09T23:15:15.627", "references": [{"source": "[email protected]", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "[email protected]", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-125"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"acknowledgement": "Red Hat would like to thank Intel for reporting this issue.", "bugzilla": {"description": "microcode: Out of bounds read for some Intel Atom processors", "id": "2049558", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2049558"}, "csaw": false, "cvss3": {"cvss3_base_score": "3.6", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:L", "status": "draft"}, "cwe": "CWE-125", "details": ["Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.", "A flaw was found in microcode. An out-of-bounds read under a complex microarchitectural condition in the memory subsystem for some Intel Atom(R) Processors may allow an authenticated user to potentially enable information disclosure or cause a denial of service via network access."], "name": "CVE-2021-33120", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Affected", "package_name": "microcode_ctl", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "microcode_ctl", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "microcode_ctl", "product_name": "Red Hat Enterprise Linux 8"}], "public_date": "2022-02-08T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2021-33120\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-33120\nhttps://access.redhat.com/articles/6716541\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00589.html"], "statement": "Red Hat has very limited to no visibility and control over binary blobs provided by third-party vendors. Red Hat relies heavily on the vendors to provide timely updates and information about included changes for this content and in most cases merely acts as a release vehicle between the third-party vendor and Red Hat customers with no possibility of influencing or even documenting the changes. Unless explicitly stated, the level of insight, oversight, and control Red Hat has does not meet the criteria required (in terms of Red Hat owned development processes and QA, documentation) for releasing this content as RHSA. For more information please contact the binary content vendor.", "threat_severity": "Moderate"}