Observable discrepancy in Intel Processors - CVE-2021-33149

Vulnerability identifier: #VU84030

CSH Severity: Low

CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-33149

CWE-ID: CWE-203

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to the observable behavioral discrepancy issue. A local user can gain unauthorized access to sensitive information on the system.

Intel Processors
MELIPC Series MI5122-VW
MELIPC Series MI2012-W
MELIPC Series MI1002-W
MELIPC Series MI3321G-W
MELIPC Series MI3315G-W
MELSEC iQ-R Series R102WCPU-W
MELSEC Q Series Q24DHCCPU-V
MELSEC Q Series Q24DHCCPU-VG
MELSEC Q Series Q24DHCCPU-LS
MELSEC Q Series Q26DHCCPU-LS

Install updates from vendor's website.

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00648.html
• https://security.netapp.com/advisory/ntap-20220818-0002/

• Information disclosure in Intel Processors
• Multiple vulnerabilities in Mitsubishi Electric FA Engineering Software products