Strix
26.1K

CVE-2022-27879

MEDIUMCVSS 4.4/10EPSS 0.17%

Last modified

CVE-2022-27879 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.

Description

Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1
4.4/10

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS Probability
0.17%

6.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
IntelPentium J6426 FirmwareAll versions
IntelPentium J4205 FirmwareAll versions
IntelPentium J3710 FirmwareAll versions
IntelPentium J2900 FirmwareAll versions
IntelPentium J2850 FirmwareAll versions
IntelPentium N6415 FirmwareAll versions
IntelPentium N4200e FirmwareAll versions
IntelPentium N4200 FirmwareAll versions
IntelPentium N3710 FirmwareAll versions
IntelPentium N3700 FirmwareAll versions
IntelPentium N3540 FirmwareAll versions
IntelPentium N3530 FirmwareAll versions
IntelPentium N3520 FirmwareAll versions
IntelPentium N3510 FirmwareAll versions
IntelCeleron J6412 FirmwareAll versions
IntelCeleron J6413 FirmwareAll versions
IntelCeleron J4025 FirmwareAll versions
IntelCeleron J4125 FirmwareAll versions
IntelCeleron J3355e FirmwareAll versions
IntelCeleron J3455e FirmwareAll versions
IntelCeleron J4005 FirmwareAll versions
IntelCeleron J4105 FirmwareAll versions
IntelCeleron J3355 FirmwareAll versions
IntelCeleron J3455 FirmwareAll versions
IntelCeleron J3060 FirmwareAll versions
IntelCeleron J3160 FirmwareAll versions
IntelCeleron J1800 FirmwareAll versions
IntelCeleron J1900 FirmwareAll versions
IntelCeleron J1750 FirmwareAll versions
IntelCeleron J1850 FirmwareAll versions
IntelCeleron N6210 FirmwareAll versions
IntelCeleron N4500 FirmwareAll versions
IntelCeleron N4505 FirmwareAll versions
IntelCeleron N5100 FirmwareAll versions
IntelCeleron N5105 FirmwareAll versions
IntelCeleron N6211 FirmwareAll versions
IntelCeleron N4020 FirmwareAll versions
IntelCeleron N4120 FirmwareAll versions
IntelCeleron N3350e FirmwareAll versions
IntelCeleron N4000 FirmwareAll versions
IntelCeleron N4100 FirmwareAll versions
IntelCeleron N3350 FirmwareAll versions
IntelCeleron N3450 FirmwareAll versions
IntelCeleron N3010 FirmwareAll versions
IntelCeleron N3060 FirmwareAll versions
IntelCeleron N3160 FirmwareAll versions
IntelCeleron N3000 FirmwareAll versions
IntelCeleron N3050 FirmwareAll versions
IntelCeleron N3150 FirmwareAll versions
IntelCeleron N2808 FirmwareAll versions

Showing 50 of 71 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2022-27879?
Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
How severe is CVE-2022-27879?
CVE-2022-27879 has a CVSS score of 4.4/10 (MEDIUM severity). The EPSS model estimates a 0.17% probability of exploitation in the next 30 days.
How do I fix CVE-2022-27879?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2022-27879?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST