CVSS: 7.5EPSS: 0%CPEs: 132EXPL: 0CVE-2022-21216 – kernel: Intel firmware update for insufficient granularity of access control in out-of-band management in some Intel Atom and Intel Xeon Scalable Processors
https://notcve.org/view.php?id=CVE-2022-21216
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access. A flaw was found in the Linux kernel. A potential security vulnerability in some Intel(R) Atom(R) and Intel(R) Xeon(R) Scalable Processors may allow privilege escalation. This flaw may allow a privileged user to enable privilege escalation via adjacent network access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html https://security.netapp.com/advisory/ntap-20230601-0005 https://access.redhat.com/security/cve/CVE-2022-21216 https://bugzilla.redhat.com/show_bug.cgi?id=2171227 •
CVSS: 8.2EPSS: 0%CPEs: 106EXPL: 0CVE-2021-0187
https://notcve.org/view.php?id=CVE-2021-0187
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. • http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html •
CVSS: 7.9EPSS: 0%CPEs: 894EXPL: 0CVE-2022-21198
https://notcve.org/view.php?id=CVE-2022-21198
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. La condición de ejecución de tiempo de verificación y tiempo de uso en el firmware del BIOS para Intel(R) Processors, puede permitir que un usuario con privilegios habilite la escalada de privilegios a través del acceso local. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition •
CVSS: 8.2EPSS: 0%CPEs: 260EXPL: 0CVE-2022-26006
https://notcve.org/view.php?id=CVE-2022-26006
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. Una validación de entrada incorrecta en el firmware del BIOS para algunos procesadores Intel(R) puede permitir que un usuario con privilegios habilite potencialmente la escalada de privilegios a través del acceso local. • https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 0%CPEs: 144EXPL: 0CVE-2021-33060
https://notcve.org/view.php?id=CVE-2021-33060
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Una escritura fuera de límites en el firmware de la BIOS para algunos procesadores Intel(R) puede permitir que un usuario autenticado permita potencialmente una escalada de privilegios por medio de acceso local. • https://security.netapp.com/advisory/ntap-20220930-0004 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00686.html • CWE-787: Out-of-bounds Write •