CVE-2021-33107

EUVD-2021-19822 · Published Feb 9, 2022

Insufficiently protected credentials in USB provisioning for Intel(R) AMT SDK before version 16.0.3, Intel(R) SCS before version 12.2 and Intel(R) MEBx before versions 11.0.0.0012, 12.0.0.0011, 14.0.0.0004 and 15.0.0.0004 may allow an unauthenticated user to potentially enable information disclosure via physical access.

Technologies

Intel Q170Intel Core I7-8850HIntel Core I7-8750HIntel Core I7 1068Ng7 FirmwareIntel Core I9-9900Kf FirmwareIntel Core I9-10900XIntel Core I5-10500EIntel Core I5-10600KfIntel Core I7-8086KIntel Core I3-8145UIntel Core I7-10810U FirmwareIntel Core I3 9100FIntel Core I5 8400 FirmwareIntel Core I7 8560UIntel Core I9-10900X FirmwareIntel Core I3 FirmwareIntel Core I7-8705GIntel Core I9-8950HkIntel Core I5 9500T FirmwareIntel H170Intel Q570Intel Core I7-8706G Intel Core I9-8950Hk FirmwareIntel Core I5 10110Y FirmwareIntel Core I3-1005G1Intel Core I9-10910Intel Core I9-9880HIntel Core I7-10700TeIntel Core I7 1065G7Intel Core I9-9900KfIntel C621Intel Core I3-10105TIntel Core I3-8100Intel Core I3 9100Intel Core I7 FirmwareIntel Core I3-10100TeIntel Core I7 9700Intel Core I7-10875H FirmwareIntel Core I7-10810UIntel Core I7 8559U FirmwareIntel Core I5Intel Core I5 9600Kf FirmwareIntel Core I3-8100HIntel Core I3 8300Intel Core I7-10510U FirmwareIntel Core I9-9900XIntel Core I5-10210U FirmwareIntel Core I5-8305GIntel Core I5-8600KIntel Core I5 8400Intel Setup And Configuration SoftwareIntel Core I5 8500T FirmwareIntel Core I9-10980Hk FirmwareIntel Core I9 9900K FirmwareIntel Core I9 9880HIntel C627Intel Core I7-10700 FirmwareIntel Core I7-8809GIntel Core I5-10500TeIntel Core I7 9700FIntel Core I3-8130UIntel Core I7 1068Ng7Intel Core I7-8565UIntel Z590Intel Core I3 9100 FirmwareIntel Core I5-10400HIntel Core I5-10400T FirmwareIntel Q150Intel Core I7 10510YIntel Core I3-8140UIntel Core I5 10110YIntel Core I5-1030G4 FirmwareIntel Core I7 9700 FirmwareIntel C625Intel Core I3-10105T FirmwareIntel Core I9-10980Xe FirmwareIntel W480Intel Core I3-10100F FirmwareIntel Core I5-10300H FirmwareIntel Core I5-1030G7Intel Core I7-10610UIntel Core I3-8300TIntel Core I9 9900Intel Core I9-10900TIntel Core I7-10850HIntel Core I3-10325 FirmwareIntel Core I9 9980HkIntel Core I9-7920XIntel Core I5 M480 FirmwareIntel Core I3 8100T FirmwareIntel Core I5-10400F FirmwareIntel Core I5 8400TIntel C246Intel Core I5 9500F FirmwareIntel Cm246Intel Core I3 9100T FirmwareIntel Core I5\+8400Intel Core I7 8700Intel Core I7 9700Kf FirmwareIntel Core I5 8600T FirmwareIntel Core I7 8700TIntel Core I7-1060G7 FirmwareIntel C621AIntel Z170Intel Core I3-1000Ng4Intel Core I7-1060Ng7Intel W480EIntel C629Intel Core I9-10850HIntel Core I9 9900KIntel Core I7 9700KfIntel Core I9-9960XIntel Core I5-10200H FirmwareIntel Core I5 9400TIntel Core I3-10100T FirmwareIntel Core I5-10600KIntel Core I3 9320Intel Core I9-9900X FirmwareIntel Core I5-10505Intel Core I5 9400 FirmwareIntel Core I3-10105FIntel Core I9-10850KIntel Core I5 8600TIntel Core I9-10980HkIntel Core I5-10500Intel Core I5-10400FIntel H110Intel Core I9 9900T FirmwareIntel Core I3-1005G1 FirmwareIntel Core I5 8600Intel Core I7-10870HIntel Core I5-10505 FirmwareIntel Celeron 4305UIntel Core I7-1065G7Intel Core I9-9820XIntel Core I5-8350UIntel Core I5 9400T FirmwareIntel Core I3 8300TIntel Core I3-1000Ng4 FirmwareIntel Core I7-8500YIntel Core I9 9880H FirmwareIntel Core I3-10300 FirmwareIntel Core I5 FirmwareIntel Z490Intel Core I5-10500Te FirmwareIntel Core I9-10900Intel Core I3-1000G1Intel Core I7 1060Ng7 FirmwareIntel C629AIntel Core I9-10900T FirmwareIntel Core I5-1030G7 FirmwareIntel Core I9-10900KIntel Core I9-9900KsIntel Core I7-8559UIntel Core I5 8500 FirmwareIntel Core I3-10100Te FirmwareIntel Core I7 9700KIntel Core I5-8250UIntel Core I7 8086KIntel Core I7-8700BIntel Core I3 9100F FirmwareIntel Core I7\+8700 FirmwareIntel Core I5-10500HIntel Core I3 8300 FirmwareIntel Core I9-9940X FirmwareIntel Core I3 8100FIntel Core I7-8650UIntel Core I7 8700T FirmwareIntel H570Intel Core I7 10510Y FirmwareIntel Core I5 10210Y FirmwareIntel C626Intel Core I7 8700KIntel Core I5 8600 FirmwareIntel Core I7Intel Core I9-7900XIntel Core I9-10850H FirmwareIntel Core I9-10900Kf FirmwareIntel Core I5 8500Intel Core I9-9920X FirmwareIntel Core I9-10920X FirmwareIntel Core I5-10110Y FirmwareIntel Core I7 8565UIntel Core I5 L16G7Intel Core I9-10940XIntel Core I7 8650UIntel Core I5-10310UIntel Core I9-9980XeIntel Core I3-8100TIntel Core I7-8665UeIntel Core I7-10700Kf FirmwareIntel W580Intel Core I7 8650U FirmwareIntel Core I9-7920X FirmwareIntel H410Intel Core I7-1065G7 FirmwareIntel Core I5-10110YIntel Core I3Intel Core I9-7980Xe FirmwareIntel Core I5-8400Intel Core I9-10900 FirmwareIntel H270Intel Q250Intel Core I7-1068Ng7 FirmwareIntel Core I9-9900K FirmwareIntel Core I7 8550U FirmwareIntel Core I5 9600T FirmwareIntel Core I7 1060Ng7Intel Core I5-10600Intel Core I7 8550UIntel Core I9 9900 FirmwareIntel Core I9-9800XIntel Core I5-10400TIntel Core I7-10700EIntel Core I3 9300TIntel Core I3-10100YIntel Core I9 9900KfIntel Core I9-10900K FirmwareIntel Core I7 8500YIntel Core I5-10310YIntel Core I3 8100TIntel Core I7 9700F FirmwareIntel Core I7-10510Y FirmwareIntel Core I9-10900Te FirmwareIntel Core I7-10700K FirmwareIntel Core I3 9300T FirmwareIntel Core I9-7900X FirmwareIntel B560Intel Core I9-7940XIntel Core I7-10700Intel Core I7-10700KfIntel Z270Intel Core I5-1035G4Intel Core I3 9100TIntel Management Engine Bios ExtensionIntel Core I5 9600KfIntel Core I9-10940X FirmwareIntel Core I3-10305TIntel Core I3-10100EIntel Core I3-10100 FirmwareIntel Core I3-10100Intel Core I3 8100Intel Core I9-9960X FirmwareIntel Core I3-10105F FirmwareIntel Core I7-10700KIntel Core I9-9900 FirmwareIntel Core I5 8500TIntel B460Intel Core I3-10305 FirmwareIntel Core I5-10600K FirmwareIntel Core I9 9900KsIntel Core I5-10310Y FirmwareIntel Core I7 8560U FirmwareIntel Core I7-8709GIntel Core I3-10105 FirmwareIntel Core I3-10305T FirmwareIntel Core I3-10100FIntel Core I3 9350KfIntel Core I3-8350KIntel Core I5 10210YIntel Core I9 FirmwareIntel Cm236Intel Core I5 L16G7 FirmwareIntel Core I5-1030Ng7 FirmwareIntel Core I5-10500TIntel Core I5 9500TIntel Xeon FirmwareIntel Core I9-9900T FirmwareIntel Core I5 9600K FirmwareIntel Celeron 4305UeIntel Core I3-8100BIntel Core I5-10500H FirmwareIntel Core I9-7940X FirmwareIntel Core I5-10600 FirmwareIntel Core I7 9700K FirmwareIntel Core I7-8700TIntel Core I7-10700F FirmwareIntel Core I3 9350K FirmwareIntel Core I3-10300T FirmwareIntel Core I9-10980XeIntel B250Intel Core I9-9920XIntel Core I7-10750HIntel Core I5-1038Ng7Intel Core I7-10610U FirmwareIntel Core I7-10510UIntel Core I5-10400H FirmwareIntel Core I9-9980Xe FirmwareIntel Core I7-8550UIntel Core I5 9400FIntel Core I9-9900Intel C232Intel Core I3-10105Intel Core I3-10300TIntel Core I3-10100E FirmwareIntel Core I5-1038Ng7 FirmwareIntel Core I5-1030Ng7Intel Cm238Intel Core I5 9600KIntel Core I7 9700T FirmwareIntel Core I3 9300 FirmwareIntel Core I5 9500Intel Core I5-10310U FirmwareIntel Core I7\+8700Intel Core I9-10900EIntel Core I5-10500E FirmwareIntel Core I7 8700 FirmwareIntel Core I9-10900TeIntel Core I9Intel Core I3-10300Intel Core I9 9900TIntel Core I5 8600K FirmwareIntel C622Intel Core I3 9350Kf FirmwareIntel Core I9-7980XeIntel Core I3-1000G1 FirmwareIntel Core I3 8350K FirmwareIntel Core I5-10600TIntel Core I9-9900TIntel Core I5 8400T FirmwareIntel Core I9-9900Ks FirmwareIntel XeonIntel Core I9 9900Kf FirmwareIntel Core I7-10700TIntel Core I7-10710U FirmwareIntel Core I9-9940XIntel Q270Intel Core I9-9980HkIntel Core I3 8100 FirmwareIntel Core I9-10885HIntel B150Intel Core I9-7960X FirmwareIntel Core I5-10400 FirmwareIntel Core I7 1060G7 FirmwareIntel Core I7-10700T FirmwareIntel Core I5-1035G7Intel Core I5\+8500 FirmwareIntel Core I9-7960XIntel Core I5-1035G4 FirmwareIntel Core I5-1035G7 FirmwareIntel Core I5 9600 FirmwareIntel Core I7 9700TIntel Core I9-9800X FirmwareIntel Core I7-10850H FirmwareIntel C627AIntel H420EIntel Core I7 8565U FirmwareIntel Core I9-10885H FirmwareIntel Core I5\+8400 FirmwareIntel Core I5-10210Y FirmwareIntel Core I3-8109UIntel C624Intel Pentium Gold G5400Intel Core I5-10210YIntel Core I5-1035G1Intel Q470EIntel Core I5-10500T FirmwareIntel Core I9-9880H FirmwareIntel Core I9-10900E FirmwareIntel Core I3 8350KIntel Core I7-8665UIntel Core I3-1000G4Intel Core I7-10700FIntel Core I3 8100F FirmwareIntel Core I5-10300HIntel Core I7-8706GIntel C242Intel Core I5 9500FIntel Core I7-8700KIntel Core I7 1065G7 FirmwareIntel Core I3-10110U FirmwareIntel Core I3-10100TIntel Celeron 4205UIntel Core I9 9980Hk FirmwareIntel Core I5-10600Kf FirmwareIntel Core I5 8600KIntel Core I7-10750H FirmwareIntel Core I3-10110Y FirmwareIntel Core I5-10500 FirmwareIntel Core I9-10900FIntel Core I7 8086K FirmwareIntel Core I9-9900KIntel Core I7-8557UIntel Core I5-10610UIntel H510Intel Core I3-8145UeIntel Core I3-10110YIntel Core I5-10600T FirmwareIntel Core I9 9900Ks FirmwareIntel C236Intel Core I5-10210UIntel Core I3 9300Intel Core I5 9600TIntel Core I5-10200HIntel Core I3-10110UIntel Core I3 8300T FirmwareIntel Core I7-10710UIntel Core I3-10320 FirmwareIntel Core I5\+8500Intel Core I9-10920XIntel Core I9-9820X FirmwareIntel Core I3-10325Intel Core I7-10510YIntel Core I5 10310Y FirmwareIntel Core I5 9600Intel Core I3-10305Intel Core I5 9400Intel Core I3-10320Intel Core I7-1060G7Intel Core I7-10700Te FirmwareIntel Core I7-10875HIntel Core I7-1068Ng7Intel Core I9-10900F FirmwareIntel Core I7-8569UIntel Core I7 8559UIntel Core I7-10700E FirmwareIntel Core I3-10100Y FirmwareIntel Core I7-1060Ng7 FirmwareIntel Core I5 M480Intel Core I3-8300Intel C422Intel Core I9-10900KfIntel Active Management Technology Software Development KitIntel Q470Intel Core I5 9400F FirmwareIntel Core I5-1030G4Intel Core I7 1060G7Intel Core I7-8700Intel Core I3 9320 FirmwareIntel Core I7 8500Y FirmwareIntel Core I3 9350KIntel Core I5-10610U FirmwareIntel H470Intel Core I9-10910 FirmwareIntel C628Intel Core I7 8700K FirmwareIntel Z370Intel Core I9-10850K FirmwareIntel Core I7-10870H FirmwareIntel Core I9-9980Hk FirmwareIntel Core I5-1035G1 FirmwareIntel Core I5-10400Intel Core I3-1000G4 FirmwareIntel Core I5 10310YIntel Core I5 9500 FirmwareIntel X299

Weaknesses

CWE-522

CVSS scores

v3.14.6CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
v2.02.1AV:L/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Privilege Escalation

T1068Exploitation for Privilege Escalation

References

Potentially impacted assets

See if this affects your attack surface

Latest trending attack

Criticalyesterday

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

This control is the second step of the Patrowl response to CVE-2026-111497 (Node2Shell). It complements the first control of 22 October 2026, which focused on the Node.js runtime, and does not replace it. Why a second control CVE-2026-111497 is an out-of-bounds write in the Google Brotli decoder, the library that decompresses Brotli ("br") data. It was first published as a Node.js vulnerability, because Node.js bundles this decoder. Later publications showed that the flaw is in the library itself. Every product that embeds an affected version of the decoder is concerned, whatever its language or vendor. A public proof of concept demonstrates code execution. Any server that decompresses request bodies sent with "Content-Encoding: br" exposes the decoder to unauthenticated attackers. Known cases include Express 5 and NestJS 11 on Node.js, Koa and Fastify setups, Bun, Envoy and Istio with request decompression enabled, and any application or reverse proxy that decodes Brotli request bodies with an affected library. The flaw also works in the other direction. A malicious server can compromise an unpatched client that decodes a Brotli response, for example Node.js fetch(), Python clients (requests, httpx, aiohttp, Scrapy) with the Brotli or brotlicffi package, or libcurl builds with Brotli support. What this control checks Patrowl sends small, valid Brotli-compressed requests to each asset and observes whether the server decodes them. The check does not depend on the technology: it detects the behaviour, whatever the stack behind it. These requests are what any legitimate client could send. They never reach the vulnerable code path and cannot affect the availability of the service. How to read the result Potentially impacted means the asset decodes Brotli request bodies: the attack surface is exposed. It does not confirm that the asset is vulnerable. The version of the Brotli decoder in use is not visible from the outside. This check covers applications that parse request bodies on their root path. A Not impacted result does not rule out exposure on other routes, nor on the client side. Checking the versions on the servers remains the only exhaustive verification. Affected and fixed versions Google Brotli 1.0.3 to 1.2.0 are affected, fixed in 1.0.10, 1.1.1 and 1.2.1. Fixed releases of the main products embedding it: Node.js 22.23.4, 24.22.1 and 26.12.1 (end-of-life lines 20.x and older and 25.x receive no fix), Bun 1.4.4, Envoy 1.37.8, 1.38.6, 1.39.3 and 1.40.0, Istio 1.29.9, 1.30.6 and 1.31.2, Python Brotli 1.2.1 and brotlicffi 1.2.1.0. Products that link against the system library depend on the Brotli package of the Linux distribution. Recommendations Update every component that embeds the Brotli decoder (only real fix). Start with the assets flagged by this control. Restart the processes after the update. Rebuild containers, single-executable applications and appliances that bundle an affected runtime or library. Reduce the exposure until the update is deployed. Reject requests with "Content-Encoding: br" at the reverse proxy, load balancer or WAF, case-insensitively and including lists such as "gzip, br". On Envoy and Istio, disable request decompression for Brotli. Review outbound calls. List the features that fetch content from servers you do not control, and patch the services that host them first.

CVE-2021-33107

Technologies

Weaknesses

CVSS scores

MITRE ATT&CK

References

Potentially impacted assets

Latest trending attack

Google Brotli decoder - Remote Code Execution via compressed requests (Exploitation Check)

Our latest news

PHP2Shell: Two Critical RCE Flaws in PHP (CVSS 9.2)

Manage External Security Across All Your Entities

Will AI Become the Next Hacker? Bruce Schneier Answers at DEF CON 34

Take 15 minutes to discover our platform with our experts