K000133630 : Intel processor vulnerability CVE-2022-26343

Security Advisory Description

Improper access control in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2022-26343)

Impact

This vulnerability may allow a privileged user to potentially enable escalation of privilege through local access. This hardware issue impacts all hardware products using the Intel Xeon D processor 1500 series.

All versions of BIG-IP Virtual Edition (VE) are potentially impacted if the processor underlying the BIG-IP VE installation is affected. Microcode updates from Intel are available to address this issue but must be applied at the hardware level, which is outside the scope of the ability of F5 to support or patch.

The following VELOS and BIG-IP hardware products contain the affected Intel processor:

• VELOS Blade BX110
• BIG-IP i2600, i2800
• BIG-IP i4600, i4800
• HERCULON i2600, i2800