CVE-2022-0005

moderate-risk
Published 2022-05-12

Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.

Do I need to act?

-
0.04% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
2
CVSS 2.4/10 Low
PHYSICAL / LOW complexity

Affected Products (20)

Celeron G5205U Firmware
Celeron G5305U Firmware
Celeron G5900 Firmware
Celeron G5900T Firmware
Celeron G5905 Firmware
Celeron G5905T Firmware
Celeron G5920 Firmware
Celeron G5925 Firmware
Celeron N5095 Firmware
Celeron N5100 Firmware
Celeron N5105 Firmware

Affected Vendors

Intel

References (2)

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614....
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00614....
43
/ 100
moderate-risk
Severity 10/34 · Low
Exploitability 0/34 · Minimal
Exposure 33/34 · Critical