CVE-2022-21131
MEDIUMCVSS 5.5/10EPSS 0.29%
Last modified
CVE-2022-21131 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Core I9-7940x Firmware | All versions |
| Intel | Core I9-7960x Firmware | All versions |
| Intel | Core I9-7980xe Firmware | All versions |
| Intel | Core I9-7920x Firmware | All versions |
| Intel | Core I9-7900x Firmware | All versions |
| Intel | Xeon Gold 6138p Firmware | All versions |
| Intel | Xeon Bronze 3104 Firmware | All versions |
| Intel | Xeon Bronze 3106 Firmware | All versions |
| Intel | Xeon Gold 5115 Firmware | All versions |
| Intel | Xeon Gold 5118 Firmware | All versions |
| Intel | Xeon Gold 5119t Firmware | All versions |
| Intel | Xeon Gold 5120 Firmware | All versions |
| Intel | Xeon Gold 5120t Firmware | All versions |
| Intel | Xeon Gold 5122 Firmware | All versions |
| Intel | Xeon Gold 6126 Firmware | All versions |
| Intel | Xeon Gold 6126f Firmware | All versions |
| Intel | Xeon Gold 6126t Firmware | All versions |
| Intel | Xeon Gold 6128 Firmware | All versions |
| Intel | Xeon Gold 6130 Firmware | All versions |
| Intel | Xeon Gold 6130f Firmware | All versions |
| Intel | Xeon Gold 6130t Firmware | All versions |
| Intel | Xeon Gold 6132 Firmware | All versions |
| Intel | Xeon Gold 6134 Firmware | All versions |
| Intel | Xeon Gold 6136 Firmware | All versions |
| Intel | Xeon Gold 6138 Firmware | All versions |
| Intel | Xeon Gold 6138f Firmware | All versions |
| Intel | Xeon Gold 6138t Firmware | All versions |
| Intel | Xeon Gold 6140 Firmware | All versions |
| Intel | Xeon Gold 6142 Firmware | All versions |
| Intel | Xeon Gold 6142f Firmware | All versions |
| Intel | Xeon Gold 6144 Firmware | All versions |
| Intel | Xeon Gold 6146 Firmware | All versions |
| Intel | Xeon Gold 6148 Firmware | All versions |
| Intel | Xeon Gold 6148f Firmware | All versions |
| Intel | Xeon Gold 6150 Firmware | All versions |
| Intel | Xeon Gold 6152 Firmware | All versions |
| Intel | Xeon Gold 6154 Firmware | All versions |
| Intel | Xeon Platinum 8153 Firmware | All versions |
| Intel | Xeon Platinum 8156 Firmware | All versions |
| Intel | Xeon Platinum 8158 Firmware | All versions |
| Intel | Xeon Platinum 8160 Firmware | All versions |
| Intel | Xeon Platinum 8160f Firmware | All versions |
| Intel | Xeon Platinum 8160t Firmware | All versions |
| Intel | Xeon Platinum 8164 Firmware | All versions |
| Intel | Xeon Platinum 8168 Firmware | All versions |
| Intel | Xeon Platinum 8170 Firmware | All versions |
| Intel | Xeon Platinum 8176 Firmware | All versions |
| Intel | Xeon Platinum 8176f Firmware | All versions |
| Intel | Xeon Platinum 8180 Firmware | All versions |
| Intel | Xeon Silver 4108 Firmware | All versions |
Showing 50 of 146 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-21131?
Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
How severe is CVE-2022-21131?
CVE-2022-21131 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.29% probability of exploitation in the next 30 days.
How do I fix CVE-2022-21131?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-21126The package com.github.samtools:htsjdk before 3.0.1 are vuln…7.8
- CVE-2022-21127Incomplete cleanup in specific special register read operati…5.5
- CVE-2022-21128Insufficient control flow management in the Intel(R) Advisor…7.8
- CVE-2022-21129Versions of the package nemo-appium before 0.0.9 are vulnera…9.8
- CVE-2022-2113Cross-site Scripting (XSS) - Stored in GitHub repository inv…5.4
- CVE-2022-21130Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
- CVE-2022-21132Directory traversal vulnerability in pfSense-pkg-WireGuard p…6.5
- CVE-2022-21133Out-of-bounds read in the Intel(R) Trace Analyzer and Collec…5.5
- CVE-2022-21134A firmware update vulnerability exists in the "update&q…7.5
- CVE-2022-21135Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2022-21136Improper input validation for some Intel(R) Xeon(R) Processo…5.5
- CVE-2022-21137Omron CX-One Versions 4.60 and prior are vulnerable to a sta…7.8
Are you affected by CVE-2022-21131?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST