
CVE-2022-29493
https://notcve.org/view.php?id=CVE-2022-29493
16 Feb 2023 — Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html • CWE-755: Improper Handling of Exceptional Conditions •

CVE-2022-29494
https://notcve.org/view.php?id=CVE-2022-29494
16 Feb 2023 — Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html • CWE-20: Improper Input Validation •

CVE-2022-35729
https://notcve.org/view.php?id=CVE-2022-35729
16 Feb 2023 — Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user to potentially enable denial of service via network access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html • CWE-125: Out-of-bounds Read •

CVE-2022-33972 – Ubuntu Security Notice USN-5886-1
https://notcve.org/view.php?id=CVE-2022-33972
16 Feb 2023 — Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access. Erik C. Bjorge discovered that some Intel Atom and Intel Xeon Scalable Processors did not properly implement access controls for out-of-band management. This may allow a privileged network-adjacent user to potentially escalate privileges. Cfir Cohen, Erdem Aktas, Felix Wilhelm, James Forshaw, Josh Eads, Nag... • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html • CWE-682: Incorrect Calculation •

CVE-2022-26837
https://notcve.org/view.php?id=CVE-2022-26837
16 Feb 2023 — Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html • CWE-20: Improper Input Validation •

CVE-2022-32231
https://notcve.org/view.php?id=CVE-2022-32231
16 Feb 2023 — Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html • CWE-665: Improper Initialization •

CVE-2022-30539
https://notcve.org/view.php?id=CVE-2022-30539
16 Feb 2023 — Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html • CWE-416: Use After Free •

CVE-2022-26343
https://notcve.org/view.php?id=CVE-2022-26343
16 Feb 2023 — Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html •

CVE-2022-21216 – kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors
https://notcve.org/view.php?id=CVE-2022-21216
16 Feb 2023 — Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access. A flaw was found in the Linux kernel. A potential security vulnerability in some Intel(R) Atom(R) and Intel(R) Xeon(R) Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access. Erik C. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html •

CVE-2021-0187
https://notcve.org/view.php?id=CVE-2021-0187
16 Feb 2023 — Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html •