Strix
26.1K

CVE-2022-21216

MEDIUMCVSS 6.8/10EPSS 0.54%

Last modified

CVE-2022-21216 is a medium-severity vulnerability rated 6.8/10 on the CVSS scale. Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.. EPSS estimates a 0.54% chance of exploitation in the next 30 days.

Description

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

Metrics

CVSS 3.1
6.8/10

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
0.54%

41.2th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
IntelXeon Gold 5315y FirmwareAll versions
IntelXeon Gold 5317 FirmwareAll versions
IntelXeon Gold 5318n FirmwareAll versions
IntelXeon Gold 5318s FirmwareAll versions
IntelXeon Gold 5318y FirmwareAll versions
IntelXeon Gold 5320 FirmwareAll versions
IntelXeon Gold 5320t FirmwareAll versions
IntelXeon Gold 6312u FirmwareAll versions
IntelXeon Gold 6314u FirmwareAll versions
IntelXeon Gold 6326 FirmwareAll versions
IntelXeon Gold 6330 FirmwareAll versions
IntelXeon Gold 6330n FirmwareAll versions
IntelXeon Gold 6334 FirmwareAll versions
IntelXeon Gold 6336y FirmwareAll versions
IntelXeon Gold 6338 FirmwareAll versions
IntelXeon Gold 6338n FirmwareAll versions
IntelXeon Gold 6338t FirmwareAll versions
IntelXeon Gold 6342 FirmwareAll versions
IntelXeon Gold 6346 FirmwareAll versions
IntelXeon Gold 6348 FirmwareAll versions
IntelXeon Gold 6354 FirmwareAll versions
IntelXeon Platinum 8351n FirmwareAll versions
IntelXeon Platinum 8352m FirmwareAll versions
IntelXeon Platinum 8352s FirmwareAll versions
IntelXeon Platinum 8352v FirmwareAll versions
IntelXeon Platinum 8352y FirmwareAll versions
IntelXeon Platinum 8358 FirmwareAll versions
IntelXeon Platinum 8358p FirmwareAll versions
IntelXeon Platinum 8360y FirmwareAll versions
IntelXeon Platinum 8362 FirmwareAll versions
IntelXeon Platinum 8368 FirmwareAll versions
IntelXeon Platinum 8368q FirmwareAll versions
IntelXeon Platinum 8380 FirmwareAll versions
IntelXeon Silver 4309y FirmwareAll versions
IntelXeon Silver 4310 FirmwareAll versions
IntelXeon Silver 4310t FirmwareAll versions
IntelXeon Silver 4314 FirmwareAll versions
IntelXeon Silver 4316 FirmwareAll versions
IntelXeon Gold 6330h FirmwareAll versions
IntelXeon Platinum 8356h FirmwareAll versions
IntelXeon Platinum 8360h FirmwareAll versions
IntelXeon Platinum 8360hl FirmwareAll versions
IntelXeon Gold 5318h FirmwareAll versions
IntelXeon Gold 5320h FirmwareAll versions
IntelXeon Gold 6328h FirmwareAll versions
IntelXeon Gold 6328hl FirmwareAll versions
IntelXeon Gold 6348h FirmwareAll versions
IntelXeon Platinum 8353h FirmwareAll versions
IntelXeon Platinum 8354h FirmwareAll versions
IntelXeon Platinum 8376h FirmwareAll versions

Showing 50 of 66 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-21216?
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
How severe is CVE-2022-21216?
CVE-2022-21216 has a CVSS score of 6.8/10 (MEDIUM severity). The EPSS model estimates a 0.54% probability of exploitation in the next 30 days.
How do I fix CVE-2022-21216?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2022

View all 2022CVEs →

Are you affected by CVE-2022-21216?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST