Main Vulnerability Database Vulnerabilities #VU63544

Insecure Default Variable Initialization in Intel RealSense ID SDK and Intel RealSense ID F450 - CVE-2021-33130

Published: May 23, 2022

Vulnerability identifier: #VU63544

CSH Severity: Low

CVSS v4: 2.4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33130

CWE-ID: CWE-453

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists due to insecure default variable initialization. An attacker with physical access to the system can obtain potentially sensitive information.

Affected software

Intel RealSense ID SDK
Intel RealSense ID F450

How to mitigate CVE-2021-33130

Install updates from vendor's website.

Intel RealSense ID SDK - update to 0.17.1
Intel RealSense ID F450 - update to 2.6.0.74

External References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00595.html

Related Security Bulletins