Lucene search
IntelCVE-2022-34657HistoryAug 11, 2023 - 3:15 a.m.
CVE-2022-34657
2023-08-1103:15:12
CWE-20
intel
web.nvd.nist.gov
17
cve-2022-34657
intel pcsd bios
input validation
privilege escalation
firmware vulnerability
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
AI Score
4.3
Confidence
High
EPSS
0
Percentile
9.0%
Improper input validation in firmware for some Intel® PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access.
Affected configurations
Node
intelr1208wfqysrMatch-
ORintelr1208wftysMatch-
ORintelr1208wftysrMatch-
ORintelr1304wf0ysMatch-
ORintelr1304wf0ysrMatch-
ORintelr1304wftysMatch-
ORintelr1304wftysrMatch-
ORintelr2208wf0zsMatch-
ORintelr2208wf0zsrMatch-
ORintelr2208wfqzsMatch-
ORintelr2208wfqzsrMatch-
ORintelr2208wftzsMatch-
ORintelr2208wftzsrMatch-
ORintelr2224wfqzsMatch-
ORintelr2224wftzsMatch-
ORintelr2224wftzsrMatch-
ORintelr2308wftzsMatch-
ORintelr2308wftzsrMatch-
ORintelr2312wf0npMatch-
ORintelr2312wf0nprMatch-
ORintelr2312wfqzsMatch-
ORintelr2312wftzsMatch-
ORintelr2312wftzsrMatch-
ORintels2600wf0Match-
ORintels2600wf0rMatch-
ORintels2600wfqMatch-
ORintels2600wfqrMatch-
ORintels2600wftMatch-
ORintels2600wftfMatch-
ORintels2600wftrMatch-
intelpcsd_biosRange<02.01.0013
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | r1208wfqysr | - | cpe:2.3:h:intel:r1208wfqysr:-:*:*:*:*:*:*:* |
| intel | r1208wftys | - | cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:* |
| intel | r1208wftysr | - | cpe:2.3:h:intel:r1208wftysr:-:*:*:*:*:*:*:* |
| intel | r1304wf0ys | - | cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:* |
| intel | r1304wf0ysr | - | cpe:2.3:h:intel:r1304wf0ysr:-:*:*:*:*:*:*:* |
| intel | r1304wftys | - | cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:* |
| intel | r1304wftysr | - | cpe:2.3:h:intel:r1304wftysr:-:*:*:*:*:*:*:* |
| intel | r2208wf0zs | - | cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:* |
| intel | r2208wf0zsr | - | cpe:2.3:h:intel:r2208wf0zsr:-:*:*:*:*:*:*:* |
| intel | r2208wfqzs | - | cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) PCSD BIOS",
"versions": [
{
"version": "before version 02.01.0013",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
prion
prion
Input validation
2023-08-11 03:15:00
cvelist
cvelist
CVE-2022-34657
2023-08-11 02:36:52
intel
intel
Intel® PCSD BIOS Advisory
2023-08-08 00:00:00
nvd
nvd
CVE-2022-34657
2023-08-11 03:15:12
CVSS3
6
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
AI Score
4.3
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVE-2022-34657