Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBMB974F8ADCFE87E9A194A3256FB2A24F20F6A8730744A172A71DAD2A0A97B6468
HistoryMar 21, 2024 - 10:21 a.m.

Security Bulletin: IBM QRadar SIEM M7 Appliances are vulnerable to CVE-2022-21216

2024-03-2110:21:35
www.ibm.com
5
ibm
qradar siem
m7 appliances
cve-2022-21216
intelatom
intel xeon
remote attacker
elevated privileges

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON

Summary

IBM QRadar SIEM M7 Appliances could be vulnerable to an Intel CVE. IBM has addressed the relevant CVE.

Vulnerability Details

CVEID:CVE-2022-21216
**DESCRIPTION:**IntelAtom and Intel Xeon Scalable Processors could allow a remote authenticated attacker to gain elevated privileges on the system, caused by an insufficient granularity of access control in out-of-band management. By sending a specially-crafted request, an attacker could exploit this vulnerability to escalate privileges.
CVSS Base score: 7.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/247403 for the current score.
CVSS Vector: (CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
IBM QRadar SIEM M7 Appliances All M7 Firmware versions before 4.0.0

Remediation/Fixes

Affected Product(s) Version(s) Firmware

IBM QRadar SIEM M7 Appliances

| 7.5| M7 4.0.0 ISO

Workarounds and Mitigations

None

CPENameOperatorVersion
ibm security qradar siemeq7.5

Related

prion 1
ubuntucve 1
intel 1
cve 1
redhatcve 1
f5 1
debiancve 1
osv 3
alpinelinux 1
veracode 1
nessus 15
amazon 2
openvas 11
redhat 1
rocky 2
fedora 4
rosalinux 1
cloudfoundry 1
ubuntu 1
mageia 1
debian 1
prion
prion
Authorization
2023-02-16 20:15:00
ubuntucve
ubuntucve
CVE-2022-21216
2023-02-16 00:00:00
intel
intel
2023.1 IPU - Intel® Atom® and Intel® Xeon® Scalable Processors Advisory
2023-02-14 00:00:00
cve
cve
CVE-2022-21216
2023-02-16 20:15:00
redhatcve
redhatcve
CVE-2022-21216
2023-02-19 10:59:19
f5
f5
K000133432 : Intel CPU vulnerability CVE-2022-21216
2023-04-06 00:00:00
debiancve
debiancve
CVE-2022-21216
2023-02-16 20:15:00
osv
osv
CVE-2022-21216
2023-02-16 20:15:12
intel-microcode vulnerabilities
2023-02-27 05:12:38
intel-microcode - security update
2023-04-01 00:00:00
alpinelinux
alpinelinux
CVE-2022-21216
2023-02-16 20:15:00
veracode
veracode
Privilege Escalation
2023-02-18 22:24:10
nessus
nessus
Amazon Linux AMI : microcode_ctl (ALAS-2023-1715)
2023-04-06 00:00:00
SUSE SLES15 Security Update : ucode-intel (SUSE-SU-2023:0454-1)
2023-02-21 00:00:00
SUSE SLES12 Security Update : ucode-intel (SUSE-SU-2023:0455-1)
2023-02-21 00:00:00
amazon
amazon
Medium: microcode_ctl
2023-05-25 17:41:00
Important: microcode_ctl
2023-03-30 22:50:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0568-1)
2023-03-28 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0456-1)
2023-02-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0454-1)
2023-02-21 00:00:00
redhat
redhat
(RHSA-2023:5209) Important: Red Hat Virtualization Host 4.4.z SP 1 security update
2023-09-19 01:04:12
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-08-31 16:55:39
microcode_ctl bug fix and enhancement update
2023-07-08 02:53:40
fedora
fedora
[SECURITY] Fedora 37 Update: microcode_ctl-2.1-53.2.fc37
2023-08-18 00:42:26
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.fc38
2023-05-27 01:20:05
[SECURITY] Fedora 37 Update: microcode_ctl-2.1-53.1.fc37
2023-05-30 01:08:07
rosalinux
rosalinux
Advisory ROSA-SA-2023-2228
2023-09-05 09:37:11
cloudfoundry
cloudfoundry
USN-5886-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-04-20 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-02-27 00:00:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-03-11 22:00:39
debian
debian
[SECURITY] [DLA 3379-1] intel-microcode security update
2023-04-01 09:13:45

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

7.1 High

AI Score

Confidence

High

4.7 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.3%

JSON
Related for B974F8ADCFE87E9A194A3256FB2A24F20F6A8730744A172A71DAD2A0A97B6468
prion1ubuntucve1intel1cve1redhatcve1f51debiancve1osv3alpinelinux1veracode1nessus15amazon2openvas11redhat1rocky2fedora4rosalinux1cloudfoundry1ubuntu1mageia1debian1