Intel Xeon Platinum 8368q Firmware vulnerabilities

17 CVEs affecting Intel Xeon Platinum 8368q Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-23908, published 2023-08-11.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21216, published 2023-02-16. Medium severity, CVSS 6.8. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege…
• CVE-2022-21151, published 2022-05-12. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
• CVE-2021-0186, published 2021-11-17. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local access.
• CVE-2022-41804, published 2023-08-11. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2021-0159, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
• CVE-2021-33060, published 2022-08-18. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2021-33123, published 2022-05-12. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
• CVE-2021-33124, published 2022-05-12. Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days. Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
• CVE-2023-23908, published 2023-08-11. Medium severity, CVSS 4.4. EPSS: 0.3% chance of exploitation in the next 30 days. Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2022-38090, published 2023-02-16. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local…

Latest

• CVE-2022-43505, published 2023-08-11. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
• CVE-2022-33972, published 2023-02-16. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local…
• CVE-2022-33196, published 2023-02-16. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to…
• CVE-2022-32231, published 2023-02-16. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2022-30539, published 2023-02-16. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
• CVE-2022-26837, published 2023-02-16. High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days. Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.