Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:HIntel Xeon Bronze 3104
HWIntelall versionsIntel Xeon Bronze 3104 Firmware
OSIntelall versionsIntel Xeon Bronze 3106
HWIntelall versionsIntel Xeon Bronze 3106 Firmware
OSIntelall versionsIntel Xeon Gold 5115
HWIntelall versionsIntel Xeon Gold 5115 Firmware
OSIntelall versionsIntel Xeon Gold 5118
HWIntelall versionsIntel Xeon Gold 5118 Firmware
OSIntelall versionsIntel Xeon Gold 5119t
HWIntelall versionsIntel Xeon Gold 5119t Firmware
OSIntelall versionsIntel Xeon Gold 5120
HWIntelall versionsIntel Xeon Gold 5120 Firmware
OSIntelall versionsIntel Xeon Gold 5120t
HWIntelall versionsIntel Xeon Gold 5120t Firmware
OSIntelall versionsIntel Xeon Gold 5122
HWIntelall versionsIntel Xeon Gold 5122 Firmware
OSIntelall versionsIntel Xeon Gold 6126
HWIntelall versionsIntel Xeon Gold 6126f
HWIntelall versionsIntel Xeon Gold 6126f Firmware
OSIntelall versionsIntel Xeon Gold 6126 Firmware
OSIntelall versionsIntel Xeon Gold 6126t
HWIntelall versionsIntel Xeon Gold 6126t Firmware
OSIntelall versionsIntel Xeon Gold 6128
HWIntelall versionsIntel Xeon Gold 6128 Firmware
OSIntelall versionsIntel Xeon Gold 6130
HWIntelall versionsIntel Xeon Gold 6130f
HWIntelall versionsIntel Xeon Gold 6130f Firmware
OSIntelall versionsIntel Xeon Gold 6130 Firmware
OSIntelall versionsIntel Xeon Gold 6130t
HWIntelall versionsIntel Xeon Gold 6130t Firmware
OSIntelall versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
Related vulnerabilities
CVE-2022-26343HIGH8.2same product
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to poten...
CVE-2020-12360HIGH7.8same product
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially...
CVE-2021-0133HIGH8.1same product
Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an au...
CVE-2020-8739HIGH7.8same product
Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allo...
CVE-2019-11137HIGH8.2same product
Insufficient input validation in system firmware for Intel(R) Xeon(R) Scalable Processors, Intel(R) Xeon(R) Pr...