Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Xeon Gold 5317
HWIntelall versionsIntel Xeon Gold 5317 Firmware
OSIntelall versionsIntel Xeon Gold 5318h
HWIntelall versionsIntel Xeon Gold 5318h Firmware
OSIntelall versionsIntel Xeon Gold 5318n
HWIntelall versionsIntel Xeon Gold 5318n Firmware
OSIntelall versionsIntel Xeon Gold 5318s
HWIntelall versionsIntel Xeon Gold 5318s Firmware
OSIntelall versionsIntel Xeon Gold 5318y
HWIntelall versionsIntel Xeon Gold 5318y Firmware
OSIntelall versionsIntel Xeon Gold 5320
HWIntelall versionsIntel Xeon Gold 5320 Firmware
OSIntelall versionsIntel Xeon Gold 5320h
HWIntelall versionsIntel Xeon Gold 5320h Firmware
OSIntelall versionsIntel Xeon Gold 5320t
HWIntelall versionsIntel Xeon Gold 5320t Firmware
OSIntelall versionsIntel Xeon Gold 6312u
HWIntelall versionsIntel Xeon Gold 6312u Firmware
OSIntelall versionsIntel Xeon Gold 6314u
HWIntelall versionsIntel Xeon Gold 6314u Firmware
OSIntelall versionsIntel Xeon Gold 6326
HWIntelall versionsIntel Xeon Gold 6326 Firmware
OSIntelall versionsIntel Xeon Gold 6328h
HWIntelall versionsIntel Xeon Gold 6328h Firmware
OSIntelall versionsIntel Xeon Gold 6328hl
HWIntelall versionsIntel Xeon Gold 6328hl Firmware
OSIntelall versionsIntel Xeon Gold 6330
HWIntelall versionsIntel Xeon Gold 6330 Firmware
OSIntelall versionsIntel Xeon Gold 6330h
HWIntelall versionsIntel Xeon Gold 6330h Firmware
OSIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2022-41804HIGH7.2same product
Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a ...
CVE-2022-33196HIGH7.2same product
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors wh...
CVE-2022-30539HIGH7.5same product
Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en...
CVE-2022-21216HIGH7.5same product
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scal...
CVE-2022-35729HIGH7.5same product
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenti...