CVE-2022-29510

2023-11-1419:15:11

CWE-119

CWE-92

[email protected]

web.nvd.nist.gov

cve-2022-29510

intel

server board

bios firmware

buffer restrictions

privilege escalation

nvd

7.5 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper buffer restrictions in some Intel® Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

Vulners

NVD

Node

intelserver_board_m10jnp2sbRange<7.219

CPENameOperatorVersion
intel:compute_module_hns2600bp_firmwareintel compute module hns2600bp firmwarelt02.01.0015

CPE	Name	Operator	Version
intel:compute_module_hns2600bp_firmware	intel compute module hns2600bp firmware	lt	02.01.0015

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Server Board M10JNP2SB BIOS firmware",
    "versions": [
      {
        "version": "before version 7.219",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]