SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2022-29510

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

MEDIUM 6.7EPSS 0.19%

Does this matter?

Lower severity and a low EPSS score (0.19%). Track it; it rarely justifies an emergency change on its own.

Description

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS 3.1
6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.19% probability · 9th percentile
CISA KEV
Not listed
Weakness
CWE-92, CWE-119
Affected
intel/compute module hns2600bp firmware · intel/compute module hns2600bpb firmware · intel/compute module hns2600bpb24 firmware · intel/compute module hns2600bpb24r firmware · intel/compute module hns2600bpblc firmware · intel/compute module hns2600bpblc24 firmware · intel/compute module hns2600bpblc24r firmware · intel/compute module hns2600bpblcr firmware · intel/compute module hns2600bpbr firmware · intel/compute module hns2600bpbrct firmware · intel/compute module hns2600bpq firmware · intel/compute module hns2600bpq24 firmware · intel/compute module hns2600bpq24r firmware · intel/compute module hns2600bpqr firmware · intel/compute module hns2600bpr firmware · intel/compute module hns2600bps firmware · intel/compute module hns2600bps24 firmware · intel/compute module hns2600bps24r firmware · intel/compute module hns2600bpsr firmware · intel/server board m10jnp2sb firmware · +16 more
Source
secure@intel.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.