HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2022-35729

CVSS 7.5v3.1pub. 2023-02-16upd. 2024-11-21

Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Intel C621a

    HW
    Intel
    all versions

  • Intel C624a

    HW
    Intel
    all versions

  • Intel C627a

    HW
    Intel
    all versions

  • Intel C629a

    HW
    Intel
    all versions

  • Intel Xeon Gold 5315y

    HW
    Intel
    all versions

  • Intel Xeon Gold 5317

    HW
    Intel
    all versions

  • Intel Xeon Gold 5318h

    HW
    Intel
    all versions

  • Intel Xeon Gold 5318n

    HW
    Intel
    all versions

  • Intel Xeon Gold 5318s

    HW
    Intel
    all versions

  • Intel Xeon Gold 5318y

    HW
    Intel
    all versions

  • Intel Xeon Gold 5320

    HW
    Intel
    all versions

  • Intel Xeon Gold 5320h

    HW
    Intel
    all versions

  • Intel Xeon Gold 5320t

    HW
    Intel
    all versions

  • Intel Xeon Gold 6312u

    HW
    Intel
    all versions

  • Intel Xeon Gold 6314u

    HW
    Intel
    all versions

  • Intel Xeon Gold 6326

    HW
    Intel
    all versions

  • Intel Xeon Gold 6328h

    HW
    Intel
    all versions

  • Intel Xeon Gold 6328hl

    HW
    Intel
    all versions

  • Intel Xeon Gold 6330

    HW
    Intel
    all versions

  • Intel Xeon Gold 6330h

    HW
    Intel
    all versions

  • Intel Xeon Gold 6330n

    HW
    Intel
    all versions

  • Intel Xeon Gold 6334

    HW
    Intel
    all versions

  • Intel Xeon Gold 6336y

    HW
    Intel
    all versions

  • Intel Xeon Gold 6338

    HW
    Intel
    all versions

  • Intel Xeon Gold 6338n

    HW
    Intel
    all versions

  • Intel Xeon Gold 6338t

    HW
    Intel
    all versions

  • Intel Xeon Gold 6342

    HW
    Intel
    all versions

  • Intel Xeon Gold 6346

    HW
    Intel
    all versions

  • Intel Xeon Gold 6348

    HW
    Intel
    all versions

  • Intel Xeon Gold 6348h

    HW
    Intel
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2021-39296CRITICAL10.0PL ✓same product

OpenBMC: pominięcie uwierzytelnienia przez spreparowane wiadomości IPMI

CVE-2022-41804HIGH7.2same product

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a ...

CVE-2021-39295HIGH7.5same product

In OpenBMC 2.9, crafted IPMI messages allow an attacker to cause a denial of service to the BMC via the netipm...

CVE-2022-21216HIGH7.5same product

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scal...

CVE-2022-26837HIGH7.5same product

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot...