CVE-2021-33150

Hardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

Published: 2022-03-11 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2021-33150 is rated Low Risk (36.3/100): CVSS Medium severity, with low exploitation likelihood (EPSS 0.34%). Monitor for updates and reassess as exploit intelligence or EPSS changes.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2021-33150

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.15% 0.34% +0.19%
2 2026-05-04 0.37% 0.15% -0.22%
3 2026-05-03 — 0.37% —

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2021-33150

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
6.8 3.1 MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Click to expand
Attack vector (AV:P)
Hands-on access—USB, keyboard, opening the case—not something you do purely over the wire.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 0.9 5.9 [email protected]
6.8 3.1 MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Click to expand
Attack vector (AV:P)
Hands-on access—USB, keyboard, opening the case—not something you do purely over the wire.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:H)
Serious risk that confidential data gets exposed in a big way.
Integrity (I:H)
They could widely tamper with or forge data—trust in the data is badly hurt.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 0.9 5.9 134c704f-9b21-4f2e-91b3-4a467353bcc0
4.6 2.0 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P Click to expand
Access vector (AV:L)
Requires local access to the target system.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:P)
Partial availability impact.
 3.9 6.4 [email protected]

Weakness enumeration for CVE-2021-33150

OS Trackers for CVE-2021-33150

vendor priority summary link
redhat medium — https://access.redhat.com/security/cve/CVE-2021-33150

Affected software / configurations for CVE-2021-33150

Vendor Product Version Raw CPE
intel atom_c2308 — cpe:2.3:h:intel:atom_c2308:-:*:*:*:*:*:*:*
intel atom_c2316 — cpe:2.3:h:intel:atom_c2316:-:*:*:*:*:*:*:*
intel atom_c2338 — cpe:2.3:h:intel:atom_c2338:-:*:*:*:*:*:*:*
intel atom_c2350 — cpe:2.3:h:intel:atom_c2350:-:*:*:*:*:*:*:*
intel atom_c2358 — cpe:2.3:h:intel:atom_c2358:-:*:*:*:*:*:*:*
intel atom_c2508 — cpe:2.3:h:intel:atom_c2508:-:*:*:*:*:*:*:*
intel atom_c2516 — cpe:2.3:h:intel:atom_c2516:-:*:*:*:*:*:*:*
intel atom_c2518 — cpe:2.3:h:intel:atom_c2518:-:*:*:*:*:*:*:*
intel atom_c2530 — cpe:2.3:h:intel:atom_c2530:-:*:*:*:*:*:*:*
intel atom_c2538 — cpe:2.3:h:intel:atom_c2538:-:*:*:*:*:*:*:*
intel atom_c2550 — cpe:2.3:h:intel:atom_c2550:-:*:*:*:*:*:*:*
intel atom_c2558 — cpe:2.3:h:intel:atom_c2558:-:*:*:*:*:*:*:*
intel atom_c2718 — cpe:2.3:h:intel:atom_c2718:-:*:*:*:*:*:*:*
intel atom_c2730 — cpe:2.3:h:intel:atom_c2730:-:*:*:*:*:*:*:*
intel atom_c2738 — cpe:2.3:h:intel:atom_c2738:-:*:*:*:*:*:*:*
intel atom_c2750 — cpe:2.3:h:intel:atom_c2750:-:*:*:*:*:*:*:*
intel atom_c2758 — cpe:2.3:h:intel:atom_c2758:-:*:*:*:*:*:*:*
intel atom_c3308 — cpe:2.3:h:intel:atom_c3308:-:*:*:*:*:*:*:*
intel atom_c3336 — cpe:2.3:h:intel:atom_c3336:-:*:*:*:*:*:*:*
intel atom_c3338 — cpe:2.3:h:intel:atom_c3338:-:*:*:*:*:*:*:*
intel atom_c3338r — cpe:2.3:h:intel:atom_c3338r:-:*:*:*:*:*:*:*
intel atom_c3436l — cpe:2.3:h:intel:atom_c3436l:-:*:*:*:*:*:*:*
intel atom_c3508 — cpe:2.3:h:intel:atom_c3508:-:*:*:*:*:*:*:*
intel atom_c3538 — cpe:2.3:h:intel:atom_c3538:-:*:*:*:*:*:*:*
intel atom_c3558 — cpe:2.3:h:intel:atom_c3558:-:*:*:*:*:*:*:*
intel atom_c3558r — cpe:2.3:h:intel:atom_c3558r:-:*:*:*:*:*:*:*
intel atom_c3708 — cpe:2.3:h:intel:atom_c3708:-:*:*:*:*:*:*:*
intel atom_c3750 — cpe:2.3:h:intel:atom_c3750:-:*:*:*:*:*:*:*
intel atom_c3758 — cpe:2.3:h:intel:atom_c3758:-:*:*:*:*:*:*:*
intel atom_c3758r — cpe:2.3:h:intel:atom_c3758r:-:*:*:*:*:*:*:*
intel atom_c3808 — cpe:2.3:h:intel:atom_c3808:-:*:*:*:*:*:*:*
intel atom_c3830 — cpe:2.3:h:intel:atom_c3830:-:*:*:*:*:*:*:*
intel atom_c3850 — cpe:2.3:h:intel:atom_c3850:-:*:*:*:*:*:*:*
intel atom_c3858 — cpe:2.3:h:intel:atom_c3858:-:*:*:*:*:*:*:*
intel atom_c3950 — cpe:2.3:h:intel:atom_c3950:-:*:*:*:*:*:*:*
intel atom_c3955 — cpe:2.3:h:intel:atom_c3955:-:*:*:*:*:*:*:*
intel atom_c3958 — cpe:2.3:h:intel:atom_c3958:-:*:*:*:*:*:*:*
intel atom_x5-e3930 — cpe:2.3:h:intel:atom_x5-e3930:-:*:*:*:*:*:*:*
intel atom_x5-e3940 — cpe:2.3:h:intel:atom_x5-e3940:-:*:*:*:*:*:*:*
intel atom_x7-e3950 — cpe:2.3:h:intel:atom_x7-e3950:-:*:*:*:*:*:*:*
intel b150 — cpe:2.3:h:intel:b150:-:*:*:*:*:*:*:*
intel b250 — cpe:2.3:h:intel:b250:-:*:*:*:*:*:*:*
intel b360 — cpe:2.3:h:intel:b360:-:*:*:*:*:*:*:*
intel b365 — cpe:2.3:h:intel:b365:-:*:*:*:*:*:*:*
intel c232 — cpe:2.3:h:intel:c232:-:*:*:*:*:*:*:*
intel c236 — cpe:2.3:h:intel:c236:-:*:*:*:*:*:*:*
intel c242 — cpe:2.3:h:intel:c242:-:*:*:*:*:*:*:*
intel c246 — cpe:2.3:h:intel:c246:-:*:*:*:*:*:*:*
intel c621 — cpe:2.3:h:intel:c621:-:*:*:*:*:*:*:*
intel c621a — cpe:2.3:h:intel:c621a:-:*:*:*:*:*:*:*
intel c622 — cpe:2.3:h:intel:c622:-:*:*:*:*:*:*:*
intel c624 — cpe:2.3:h:intel:c624:-:*:*:*:*:*:*:*
intel c625 — cpe:2.3:h:intel:c625:-:*:*:*:*:*:*:*
intel c626 — cpe:2.3:h:intel:c626:-:*:*:*:*:*:*:*
intel c627 — cpe:2.3:h:intel:c627:-:*:*:*:*:*:*:*
intel c627a — cpe:2.3:h:intel:c627a:-:*:*:*:*:*:*:*
intel c628 — cpe:2.3:h:intel:c628:-:*:*:*:*:*:*:*
intel c629 — cpe:2.3:h:intel:c629:-:*:*:*:*:*:*:*
intel c629a — cpe:2.3:h:intel:c629a:-:*:*:*:*:*:*:*
intel celeron_3855u — cpe:2.3:h:intel:celeron_3855u:-:*:*:*:*:*:*:*
intel celeron_3865u — cpe:2.3:h:intel:celeron_3865u:-:*:*:*:*:*:*:*
intel celeron_3867u — cpe:2.3:h:intel:celeron_3867u:-:*:*:*:*:*:*:*
intel celeron_3955u — cpe:2.3:h:intel:celeron_3955u:-:*:*:*:*:*:*:*
intel celeron_3965u — cpe:2.3:h:intel:celeron_3965u:-:*:*:*:*:*:*:*
intel celeron_3965y — cpe:2.3:h:intel:celeron_3965y:-:*:*:*:*:*:*:*
intel celeron_4205u — cpe:2.3:h:intel:celeron_4205u:-:*:*:*:*:*:*:*
intel celeron_4305u — cpe:2.3:h:intel:celeron_4305u:-:*:*:*:*:*:*:*
intel celeron_4305ue — cpe:2.3:h:intel:celeron_4305ue:-:*:*:*:*:*:*:*
intel celeron_j3060 — cpe:2.3:h:intel:celeron_j3060:-:*:*:*:*:*:*:*
intel celeron_j3160 — cpe:2.3:h:intel:celeron_j3160:-:*:*:*:*:*:*:*
intel celeron_j3355 — cpe:2.3:h:intel:celeron_j3355:-:*:*:*:*:*:*:*
intel celeron_j3355e — cpe:2.3:h:intel:celeron_j3355e:-:*:*:*:*:*:*:*
intel celeron_j3455 — cpe:2.3:h:intel:celeron_j3455:-:*:*:*:*:*:*:*
intel celeron_j3455e — cpe:2.3:h:intel:celeron_j3455e:-:*:*:*:*:*:*:*
intel celeron_j4005 — cpe:2.3:h:intel:celeron_j4005:-:*:*:*:*:*:*:*
intel celeron_j4025 — cpe:2.3:h:intel:celeron_j4025:-:*:*:*:*:*:*:*
intel celeron_j4105 — cpe:2.3:h:intel:celeron_j4105:-:*:*:*:*:*:*:*
intel celeron_j4125 — cpe:2.3:h:intel:celeron_j4125:-:*:*:*:*:*:*:*
intel celeron_n3000 — cpe:2.3:h:intel:celeron_n3000:-:*:*:*:*:*:*:*
intel celeron_n3050 — cpe:2.3:h:intel:celeron_n3050:-:*:*:*:*:*:*:*

References for CVE-2021-33150

cvelogic Threat Intelligence