Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-21216
HistoryFeb 16, 2023 - 12:00 a.m.

CVE-2022-21216

2023-02-1600:00:00
ubuntu.com
ubuntu.com
10

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.7 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.4%

Insufficient granularity of access control in out-of-band management in
some Intel® Atom and Intel Xeon Scalable Processors may allow a
privileged user to potentially enable escalation of privilege via adjacent
network access.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchintel-microcode< 3.20230214.0ubuntu0.18.04.1UNKNOWN
ubuntu20.04noarchintel-microcode< 3.20230214.0ubuntu0.20.04.1UNKNOWN
ubuntu22.04noarchintel-microcode< 3.20230214.0ubuntu0.22.04.1UNKNOWN
ubuntu22.10noarchintel-microcode< 3.20230214.0ubuntu0.22.10.1UNKNOWN
ubuntu16.04noarchintel-microcode< 3.20230214.0ubuntu0.16.04.1+esm1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

6.8 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

4.7 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

MULTIPLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:M/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

8.4%