Lucene search

[email protected]CVE-2022-0004

HistoryMay 12, 2022 - 5:15 p.m.

CVE-2022-0004

2022-05-1217:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve-2022-0004

intel

boot guard

txt

hardware debug

processor init

privilege escalation

security vulnerability

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.1%

JSON

Hardware debug modes and processor INIT setting that allow override of locks for some Intel® Processors in Intel® Boot Guard and Intel® TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

CPENameOperatorVersion
intel:core_i3-12100_firmwareintel core i3-12100 firmwarelt16.0.15
intel:core_i3-12100f_firmwareintel core i3-12100f firmwarelt16.0.15
intel:core_i3-12100t_firmwareintel core i3-12100t firmwarelt16.0.15
intel:core_i3-12300t_firmwareintel core i3-12300t firmwarelt16.0.15
intel:core_i3-12300_firmwareintel core i3-12300 firmwarelt16.0.15
intel:core_i5-12600t_firmwareintel core i5-12600t firmwarelt16.0.15
intel:core_i5-12600kf_firmwareintel core i5-12600kf firmwarelt16.0.15
intel:core_i5-12600hx_firmwareintel core i5-12600hx firmwarelt16.0.15
intel:core_i5-12600k_firmwareintel core i5-12600k firmwarelt16.0.15
intel:core_i5-12600h_firmwareintel core i5-12600h firmwarelt16.0.15

CPE	Name	Operator	Version
intel:core_i3-12100_firmware	intel core i3-12100 firmware	lt	16.0.15
intel:core_i3-12100f_firmware	intel core i3-12100f firmware	lt	16.0.15
intel:core_i3-12100t_firmware	intel core i3-12100t firmware	lt	16.0.15
intel:core_i3-12300t_firmware	intel core i3-12300t firmware	lt	16.0.15
intel:core_i3-12300_firmware	intel core i3-12300 firmware	lt	16.0.15
intel:core_i5-12600t_firmware	intel core i5-12600t firmware	lt	16.0.15
intel:core_i5-12600kf_firmware	intel core i5-12600kf firmware	lt	16.0.15
intel:core_i5-12600hx_firmware	intel core i5-12600hx firmware	lt	16.0.15
intel:core_i5-12600k_firmware	intel core i5-12600k firmware	lt	16.0.15
intel:core_i5-12600h_firmware	intel core i5-12600h firmware	lt	16.0.15

Rows per page:

1-10 of 3981

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html

Social References

6.8 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.1%

JSON

Related for CVE-2022-0004

f51 hp1 cvelist1 intel1 prion1