{"id":"CVE-2021-33082","state":"PUBLISHED","title":"Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially e","description":"Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.","publishedAt":"2022-05-12T16:36:01.000Z","updatedAt":"2025-05-05T16:51:36.495Z","severity":{"score":4.6,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"CISA-ADP"},"assigner":"intel","products":["n/a Intel(R) SSD and Intel(R) Optane(TM) SSD Products"],"affected":[{"vendor":"n/a","product":"Intel(R) SSD and Intel(R) Optane(TM) SSD Products","versions":[{"version":"See references","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf"],"weaknesses":["CWE-212"],"ingestedAt":"2026-10-29T19:48:36.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/33xxx/CVE-2021-33082.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2021-33082","state":"PUBLISHED","datePublished":"2022-05-12T16:36:01.000Z","dateUpdated":"2025-05-05T16:51:36.495Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2021-05-18T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access."}],"affected":[{"vendor":"n/a","product":"Intel(R) SSD and Intel(R) Optane(TM) SSD Products","versions":[{"version":"See references","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","tags":["x_refsource_MISC"]},{"url":"https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"information disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"intel","dateUpdated":"2022-09-20T14:14:27.000Z","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce"},"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@intel.com","ID":"CVE-2021-33082","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Intel(R) SSD and Intel(R) Optane(TM) SSD Products","version":{"version_data":[{"version_value":"See references"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"information disclosure"}]}]},"references":{"reference_data":[{"name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","refsource":"MISC","url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html"},{"name":"https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf","refsource":"MISC","url":"https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T23:42:19.573Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":4.6,"attackVector":"PHYSICAL","baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","integrityImpact":"NONE","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2025-04-23T13:20:52.712034Z","id":"CVE-2021-33082","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-212","type":"CWE","lang":"en","description":"CWE-212 Improper Removal of Sensitive Information Before Storage or Transfer"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-05T16:51:36.495Z"}}]}}}