CVE-2022-21216 — Intel-microcode vulnerability
7 documents6 sources
Severity
6.8MEDIUMNVD
EPSS
0.1%
top 84.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 16
Latest updateFeb 27
Description
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 0.9 | Impact: 5.9
Affected Packages1 packages
🔴Vulnerability Details
3OSV▶
CVE-2022-21216: Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged u↗2023-02-16
GHSA▶
GHSA-r59j-cggc-648q: Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged u↗2023-02-16
📋Vendor Advisories
3Red Hat▶
kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors↗2023-02-16
Debian▶
CVE-2022-21216: intel-microcode - Insufficient granularity of access control in out-of-band management in some Int...↗2022