CVE-2023-22329
LOWCVSS 3.5/10EPSS 0.30%
Last modified
CVE-2023-22329 is a low-severity vulnerability rated 3.5/10 on the CVSS scale. Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
Metrics
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Atom X6200fe Firmware | All versions |
| Intel | Atom X6211e Firmware | All versions |
| Intel | Atom X6212re Firmware | All versions |
| Intel | Atom X6413e Firmware | All versions |
| Intel | Atom X6414re Firmware | All versions |
| Intel | Atom X6425e Firmware | All versions |
| Intel | Atom X6425re Firmware | All versions |
| Intel | Atom X6427fe Firmware | All versions |
| Intel | Celeron 1000m Firmware | All versions |
| Intel | Celeron 1005m Firmware | All versions |
| Intel | Celeron 1007u Firmware | All versions |
| Intel | Celeron 1017u Firmware | All versions |
| Intel | Celeron 1019y Firmware | All versions |
| Intel | Celeron 1020e Firmware | All versions |
| Intel | Celeron 1020m Firmware | All versions |
| Intel | Celeron 1037u Firmware | All versions |
| Intel | Celeron 1047ue Firmware | All versions |
| Intel | Celeron 2000e Firmware | All versions |
| Intel | Celeron 2002e Firmware | All versions |
| Intel | Celeron 2950m Firmware | All versions |
| Intel | Celeron 2955u Firmware | All versions |
| Intel | Celeron 2957u Firmware | All versions |
| Intel | Celeron 2961y Firmware | All versions |
| Intel | Celeron 2970m Firmware | All versions |
| Intel | Celeron 2980u Firmware | All versions |
| Intel | Celeron 2981u Firmware | All versions |
| Intel | Celeron 3205u Firmware | All versions |
| Intel | Celeron 3215u Firmware | All versions |
| Intel | Celeron 3755u Firmware | All versions |
| Intel | Celeron 3765u Firmware | All versions |
| Intel | Celeron 3855u Firmware | All versions |
| Intel | Celeron 3865u Firmware | All versions |
| Intel | Celeron 3867u Firmware | All versions |
| Intel | Celeron 3955u Firmware | All versions |
| Intel | Celeron 3965u Firmware | All versions |
| Intel | Celeron 3965y Firmware | All versions |
| Intel | Celeron 4205u Firmware | All versions |
| Intel | Celeron 4305u Firmware | All versions |
| Intel | Celeron 4305ue Firmware | All versions |
| Intel | Celeron 5205u Firmware | All versions |
| Intel | Celeron 5305u Firmware | All versions |
| Intel | Celeron 6305 Firmware | All versions |
| Intel | Celeron 6305e Firmware | All versions |
| Intel | Celeron 6600he Firmware | All versions |
| Intel | Celeron 725c Firmware | All versions |
| Intel | Celeron 7300 Firmware | All versions |
| Intel | Celeron 7305 Firmware | All versions |
| Intel | Celeron 7305e Firmware | All versions |
| Intel | Celeron 7305l Firmware | All versions |
| Intel | Celeron 787 Firmware | All versions |
Showing 50 of 629 affected configurations. See NVD for the full list.
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-22329?
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
How severe is CVE-2023-22329?
CVE-2023-22329 has a CVSS score of 3.5/10 (LOW severity). The EPSS model estimates a 0.30% probability of exploitation in the next 30 days.
How do I fix CVE-2023-22329?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-22322Improper restriction of XML external entity reference (XXE) …5.5
- CVE-2023-22323In BIP-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.…7.5
- CVE-2023-22324SQL injection vulnerability in the CONPROSYS HMI System (CHS…6.5
- CVE-2023-22325A denial of service vulnerability exists in the DCRegister D…5.9
- CVE-2023-22326In BIG-IP versions 17.0.x before 17.0.0.2, 16.1.x before 16.…4.9
- CVE-2023-22327Out-of-bounds write in firmware for some Intel(R) FPGA produ…4.4
- CVE-2023-2233An improper authorization issue has been discovered in GitLa…4.3
- CVE-2023-22330Use of uninitialized resource in some Intel(R) NUC BIOS firm…4.4
- CVE-2023-22331Use of default credentials vulnerability in CONPROSYS HMI Sy…7.5
- CVE-2023-22332Information disclosure vulnerability exists in Pgpool-II 4.4…6.5
- CVE-2023-22333Cross-site scripting vulnerability in EasyMail 2.00.130 and …6.1
- CVE-2023-22334Use of password hash instead of password for authentication …5.3
Are you affected by CVE-2023-22329?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST