CVE Feed

    Dashboard / CVE / CVE-2021-33120

    CVE-2021-33120

    Out of bounds read under complex microarchitectural condition in memory subsystem for some Intel Atom(R) Processors may allow authenticated user to potentially enable information disclosure or cause denial of service via network access.

    Published:Feb 8, 2022
    Last Modified:May 5, 2025
    EPS:Feb 9, 2022
    EPSS Score:0.00341
    CVSS Score:5.4

    Affected Products

    Vendor
    Intel
    Product
    Atom P5921b
    Vendor
    Intel
    Product
    Atom P5921b Firmware
    Vendor
    Intel
    Product
    Atom P5931b
    Vendor
    Intel
    Product
    Atom P5931b Firmware
    Vendor
    Intel
    Product
    Atom P5942b
    Vendor
    Intel
    Product
    Atom P5942b Firmware
    Vendor
    Intel
    Product
    Atom P5962b
    Vendor
    Intel
    Product
    Atom P5962b Firmware
    Vendor
    Intel
    Product
    Atom X6200fe
    Vendor
    Intel
    Product
    Atom X6200fe Firmware
    Vendor
    Intel
    Product
    Atom X6211e
    Vendor
    Intel
    Product
    Atom X6211e Firmware
    Vendor
    Intel
    Product
    Atom X6212re
    Vendor
    Intel
    Product
    Atom X6212re Firmware
    Vendor
    Intel
    Product
    Atom X6413e
    Vendor
    Intel
    Product
    Atom X6413e Firmware
    Vendor
    Intel
    Product
    Atom X6425e
    Vendor
    Intel
    Product
    Atom X6425e Firmware
    Vendor
    Intel
    Product
    Atom X6425re
    Vendor
    Intel
    Product
    Atom X6425re Firmware
    Vendor
    Intel
    Product
    Atom X6427fe
    Vendor
    Intel
    Product
    Atom X6427fe Firmware
    Vendor
    Intel
    Product
    Celeron J6413
    Vendor
    Intel
    Product
    Celeron J6413 Firmware
    Vendor
    Intel
    Product
    Celeron N4500
    Vendor
    Intel
    Product
    Celeron N4500 Firmware
    Vendor
    Intel
    Product
    Celeron N4505
    Vendor
    Intel
    Product
    Celeron N4505 Firmware
    Vendor
    Intel
    Product
    Celeron N5100
    Vendor
    Intel
    Product
    Celeron N5100 Firmware
    Vendor
    Intel
    Product
    Celeron N5105
    Vendor
    Intel
    Product
    Celeron N5105 Firmware
    Vendor
    Intel
    Product
    Celeron N6211
    Vendor
    Intel
    Product
    Celeron N6211 Firmware
    Vendor
    Intel
    Product
    Core I3-l13g4
    Vendor
    Intel
    Product
    Core I3-l13g4 Firmware
    Vendor
    Intel
    Product
    Core I5-l16g7
    Vendor
    Intel
    Product
    Core I5-l16g7 Firmware
    Vendor
    Intel
    Product
    Pentium J6425
    Vendor
    Intel
    Product
    Pentium J6425 Firmware
    Vendor
    Intel
    Product
    Pentium N6415
    Vendor
    Intel
    Product
    Pentium N6415 Firmware
    Vendor
    Intel
    Product
    Pentium Silver N6000
    Vendor
    Intel
    Product
    Pentium Silver N6000 Firmware
    Vendor
    Intel
    Product
    Pentium Silver N6005
    Vendor
    Intel
    Product
    Pentium Silver N6005 Firmware
    Vendor
    Intel
    Product
    Xeon D1700
    Vendor
    Intel
    Product
    Xeon D1700 Firmware
    Vendor
    Intel
    Product
    Xeon D2700
    Vendor
    Intel
    Product
    Xeon D2700 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-125 Out-of-bounds Read

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2022-21216 (CVSS 7.5) — Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scal…
    CVE-2022-21233 (CVSS 5.5) — Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially …
    CVE-2022-0004 (CVSS 6.8) — Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in I…
    CVE-2022-0001 (CVSS 6.5) — Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow a…
    CVE-2022-0002 (CVSS 6.5) — Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authoriz…
    CVE-2021-0060 (CVSS 6.6) — Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0…
    CVE-2021-0051 (CVSS 4.4) — Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High