CVE-2022-29510

moderate-risk
Published 2023-11-14

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

Do I need to act?

-
0.09% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
LOCAL / HIGH complexity

Affected Products (20)

Compute Module Hns2600Bpb Firmware
Compute Module Hns2600Bpb24 Firmware
Compute Module Hns2600Bpb24R Firmware
Compute Module Hns2600Bpblc Firmware
Compute Module Hns2600Bpblc24 Firmware
Compute Module Hns2600Bpblc24R Firmware
Compute Module Hns2600Bpblcr Firmware
Compute Module Hns2600Bpbr Firmware
Compute Module Hns2600Bpbrct Firmware
Compute Module Hns2600Bpq Firmware
Compute Module Hns2600Bpq24 Firmware
Compute Module Hns2600Bpq24R Firmware
Compute Module Hns2600Bpqr Firmware
Compute Module Hns2600Bpr Firmware
Compute Module Hns2600Bps Firmware
Compute Module Hns2600Bps24 Firmware
Compute Module Hns2600Bps24R Firmware
Compute Module Hns2600Bpsr Firmware
Server Board M10Jnp2Sb Firmware

Affected Vendors

Intel

References (2)

Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719....
Vendor Advisory https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719....
43
/ 100
moderate-risk
Severity 20/34 · Moderate
Exploitability 0/34 · Minimal
Exposure 23/34 · High