medium4.1
CVE-2022-38087
Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via…
Impact
Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intel | Xeon E-2314 Firmware | All versions |
| Intel | Xeon E-2324g Firmware | All versions |
| Intel | Xeon E-2334 Firmware | All versions |
| Intel | Xeon E-2336 Firmware | All versions |
| Intel | Xeon E-2356g Firmware | All versions |
| Intel | Xeon E-2374g Firmware | All versions |
| Intel | Xeon E-2378 Firmware | All versions |
| Intel | Xeon E-2378g Firmware | All versions |
| Intel | Xeon E-2386g Firmware | All versions |
| Intel | Xeon E-2388g Firmware | All versions |
| Intel | Xeon E-2226ge Firmware | All versions |
| Intel | Xeon E-2254me Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://security.netapp.com/advisory/ntap-20231124-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html
- https://security.netapp.com/advisory/ntap-20231124-0006/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html