CVE-2022-40262

🗓️ 20 Sep 2022 17:35:36Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 57 Views

Potential attacker can execute arbitrary code at PEI phase, bypass mitigations, disclose memory contents, discover VM secrets, bypass memory isolation & influence subsequent boot stages. Affects: Module name: S3Resume2Pe

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-40262	20 Sep 202222:39	–	circl
CNNVD	Intel NUC M15 缓冲区错误漏洞	20 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-40262 The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.	20 Sep 202217:35	–	cvelist
EUVD	EUVD-2022-43560	3 Oct 202520:07	–	euvd
NVD	CVE-2022-40262	20 Sep 202218:15	–	nvd
OSV	CVE-2022-40262	20 Sep 202218:15	–	osv
Prion	Memory corruption	20 Sep 202218:15	–	prion
Positive Technologies	PT-2022-25307 · Unknown · S3Resume2Pei	20 Sep 202200:00	–	ptsecurity
Vulnrichment	CVE-2022-40262 The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.	20 Sep 202217:35	–	vulnrichment

NVD

Node

ami aptio_vMatch5.0

Node

intel server_board_m10jnp2sb_firmwareMatch-

AND

intel server_board_m10jnp2sbMatch-

[
  {
    "product": "Aptio",
    "vendor": "AMI",
    "versions": [
      {
        "status": "affected",
        "version": "5.x"
      }
    ]
  }
]