WID-SEC-W-2023-0374

DeutschShown in its original language — a full translation is planned for a future version.

Intel BIOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation

view advisory published 2023-02-14

Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS für verschiedene Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen.

describes (6)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-32231US	medium6.7	0.21% (11th)	—	2023-02-16
Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-30704US	medium6.7	0.21% (11th)	—	2023-02-16
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-30539US	medium6.7	0.21% (11th)	—	2023-02-16
Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-26837US	high7.0	0.22% (13th)	—	2023-02-16
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-26343US	medium6.7	0.25% (16th)	—	2023-02-16
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2021-0187US	high8.2	0.21% (12th)	—	2023-02-16
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.