Intel Xeon W-1300 Firmware vulnerabilities

4 CVEs affecting Intel Xeon W-1300 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-21233, published 2022-08-18.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21180, published 2022-06-15. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.
• CVE-2022-21233, published 2022-08-18. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
• CVE-2022-0004, published 2022-05-12. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially…
• CVE-2022-0005, published 2022-05-12. Low severity, CVSS 2.4. EPSS: 0.2% chance of exploitation in the next 30 days. Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical…