DeutschShown in its original language — a full translation is planned for a future version.
Intel Chipset: Mehrere Schwachstellen
view advisory published 2022-11-08
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in der Intel Chipset Firmware ausnutzen, um seine Privilegien zu erhöhen, einen Denial of Service Zustand herbeizuführen oder Dateien zu manipulieren.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-29893US | high8.8 | — | ||
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially… | ||||
| CVE-2022-29515US | medium5.5 | — | ||
Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of se… | ||||
| CVE-2022-29466US | medium5.5 | — | ||
Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access… | ||||
| CVE-2022-27497US | high7.5 | — | ||
Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentiall… | ||||
| CVE-2022-26845US | critical9.8 | — | ||
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentiall… | ||||
| CVE-2021-33159US | medium6.7 | — | ||
Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially ena… | ||||
02
references
External citations — patches, advisories, analysis.
- HP Security Bulletin HPSBHF03818 vom 2022-11-10external
- Lenovo Security Advisory LEN-77470 vom 2022-11-09external
- WID-SEC-W-2022-1999 - CSAF Versionself
- WID-SEC-2022-1999 - Portal Versionself
- Dell Security Advisory DSA-2023-042 vom 2023-02-23external
- Dell Security Advisory DSA-2024-250 vom 2024-06-27external
- Intel Security Advisory INTEL-SA-00610 vom 2022-11-08external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan