CVE-2022-0004

highpriority · track · 27EPSS 0.003 · 20 %ileEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

0.28% (20th) EPSS

CVSS 7.2 · high

Is it mine?

438 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · fstec_bdu

EPSS · scored 2026-10-27

Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

cvss

Technical severity, 0–10. One row per scoring source.

7.3

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.2–7.3

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 0.9 · impact 5.9

v3.17.3highAV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Nsecondary · FSTEC (BDU) RU

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.16.8mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 0.9 · impact 5.9

v3.16.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-233US

affected products (438)

Products and version ranges known to be affected.

n/a Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT≤ See referencesenisa_euvdEU
Intel Corp. 10th Generation Intel Core Processor Family≤ 13.0.60fstec_bduRU
Intel Corp. 11th Generation Intel Core Processor Family≤ 15.0.40fstec_bduRU
Intel Corp. 12th Generation Intel Core Processor Family≤ 16.0.15fstec_bduRU
Intel Corp. 8th Generation Intel Core Processors≤ 11.8.92fstec_bduRU
Intel Corp. Intel 100 series≤ 11.8.92fstec_bduRU
Intel Corp. Intel 200 series≤ 11.8.92fstec_bduRU
Intel Corp. Intel 300 series≤ 12.0.90fstec_bduRU
Intel Corp. Intel 400 series≤ 14.1.65fstec_bduRU
Intel Corp. Intel 500 series≤ 15.0.40fstec_bduRU
Intel Corp. Intel Atom Processor E3900 Series≤ 3.1.92fstec_bduRU
Intel Corp. Intel Atom processor P5000 seriesall versionsfstec_bduRU
Intel Corp. Intel Atom x6000E series≤ 15.40.20fstec_bduRU
Intel Corp. Intel C230 series≤ 11.8.92fstec_bduRU
Intel Corp. Intel C240 series≤ 12.0.90fstec_bduRU
Intel Corp. Intel C250 series≤ 15.0.40fstec_bduRU
Intel Corp. Intel C620 series≤ 11.22.92fstec_bduRU
Intel Corp. Intel C620A seriesall versionsfstec_bduRU
Intel Corp. Intel Celeron J Series≤ 15.40.20fstec_bduRU
Intel Corp. Intel Celeron N Series≤ 13.50.20fstec_bduRU

showing 20 of 438

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu NVD CVE.org MITRE

published 2022-05-12modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan