Improper access control in Intel products - CVE-2022-37343

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79535

Improper access control in Intel products - CVE-2022-37343

Published: August 15, 2023


Vulnerability identifier: #VU79535
CSH Severity: Low
CVSS v4: 7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-37343
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper access restrictions. A local user can execute arbitrary code with elevated privileges.


Affected software

Intel Atom processor C3000 series
Intel Xeon D Processors
Intel Atom Processor P5000 Series
HPE ProLiant m750 Server Blade
HPE ProLiant DX220n Gen10 Plus server
HPE ProLiant DX360 Gen10 Plus server
HPE ProLiant DX380 Gen10 Plus server
HPE StoreEasy 1860 Storage
HPE Apollo 2000 Gen10 Plus System
HPE ProLiant XL220n Gen10 Plus Server
HPE ProLiant XL290n Gen10 Plus Server
HPE Apollo 4200 Gen10 Plus System
HPE StoreEasy 1660 Storage
Dell Edge Gateway 3200
Dell EMC Networking VEP1425/VEP1445/VEP1485
Dell SD-WAN Edge 600
HPE ProLiant e910t Server Blade
HPE ProLiant e910 Server Blade
Precision 7920 XL Rack
Precision 7960 XL Rack
Precision 7920 Rack
HPE Apollo 4510 Gen10 System
HPE ProLiant XL230k Gen10 Server
HPE StoreEasy 1860 Performance Storage
HPE StoreEasy 1560 Storage
HPE ProLiant XL450 Gen10 Server
HPE ProLiant XL190r Gen10 Server
HPE ProLiant XL170r Gen10 Server
HPE ProLiant XL270d Gen10 Server
HPE Apollo 4200 Gen10 Server
HPE Apollo 6500 Gen10 System
HPE StoreEasy 1660 Performance Storage
HPE Storage Performance File Controller
HPE Storage File Controller
HPE StoreEasy 1660 Expanded Storage
HPE StoreEasy 1460 Storage
HPE ProLiant DX170r Gen10 server
HPE ProLiant DX190r Gen10 server
HPE ProLiant DX560 Gen10 server
HPE ProLiant DX4200 Gen10 server
HPE ProLiant DX380 Gen10 server
HPE ProLiant DX360 Gen10 server
HPE Synergy 660 Gen10 Compute Module
HPE Synergy 480 Gen10 Compute Module
HPE ProLiant BL460c Gen10 Server Blade
PowerSwitch Z9264F-ON
PowerSwitch N3200-ON Series
PowerSwitch N2200-ON Series
PowerSwitch Z9432F-ON
PowerSwitch S5448F-ON
PowerSwitch E3200-ON Series
HPE SimpliVity 380 Gen10 Plus
HPE SimpliVity 170r Gen10 Server
HPE SimpliVity 190r Gen10 Server
HPE SimpliVity 380 Gen10 H
HPE SimpliVity 380 Gen10 G
HPE SimpliVity 380 Gen10
HPE Synergy 480 Gen10 Plus Compute Module
Precision 7960 Rack

How to mitigate CVE-2022-37343

Install updates from vendor's website.

HPE ProLiant m750 Server Blade - update to 1.60_07-24-2023
HPE Synergy 480 Gen10 Plus Compute Module - update to 1.80_07-05-2023
HPE ProLiant DX220n Gen10 Plus server - update to 1.80_07-05-2023
HPE ProLiant DX360 Gen10 Plus server - update to 1.80_07-05-2023
HPE ProLiant DX380 Gen10 Plus server - update to 1.80_07-05-2023
HPE StoreEasy 1860 Storage - update to 1.80_07-05-2023
HPE Apollo 2000 Gen10 Plus System - update to 1.80_07-05-2023
HPE ProLiant XL220n Gen10 Plus Server - update to 1.80_07-05-2023
HPE ProLiant XL290n Gen10 Plus Server - update to 1.80_07-05-2023
HPE Apollo 4200 Gen10 Plus System - update to 1.80_07-05-2023
HPE StoreEasy 1660 Storage - update to 1.80_07-05-2023
Dell Edge Gateway 3200 - update to 2.00.10
Dell EMC Networking VEP1425/VEP1445/VEP1485 - update to 2.6
Dell SD-WAN Edge 600 - update to 2.6
HPE ProLiant e910t Server Blade - update to 2.08_07-24-2023
HPE ProLiant e910 Server Blade - update to 2.08_07-24-2023
Precision 7920 XL Rack - update to 2.19.1
Precision 7960 XL Rack - update to 2.19.1
Precision 7960 Rack - update to 2.19.1
Precision 7920 Rack - update to 2.19.1
HPE Apollo 4510 Gen10 System - update to 2.90_07-20-2023
HPE ProLiant XL230k Gen10 Server - update to 2.90_07-20-2023
HPE StoreEasy 1860 Performance Storage - update to 2.90_07-20-2023
HPE StoreEasy 1560 Storage - update to 2.90_07-20-2023
HPE ProLiant XL450 Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL190r Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL170r Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL270d Gen10 Server - update to 2.90_07-20-2023
HPE Apollo 4200 Gen10 Server - update to 2.90_07-20-2023
HPE Apollo 6500 Gen10 System - update to 2.90_07-20-2023
HPE StoreEasy 1660 Performance Storage - update to 2.90_07-20-2023
HPE Storage Performance File Controller - update to 2.90_07-20-2023
HPE Storage File Controller - update to 2.90_07-20-2023
HPE StoreEasy 1660 Expanded Storage - update to 2.90_07-20-2023
HPE StoreEasy 1460 Storage - update to 2.90_07-20-2023
HPE ProLiant DX170r Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX190r Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX560 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX4200 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX380 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX360 Gen10 server - update to 2.90_07-20-2023
HPE Synergy 660 Gen10 Compute Module - update to 2.90_07-20-2023
HPE Synergy 480 Gen10 Compute Module - update to 2.90_07-20-2023
HPE ProLiant BL460c Gen10 Server Blade - update to 2.90_07-20-2023
PowerSwitch Z9264F-ON - update to 3.42.5.1-19
PowerSwitch N3200-ON Series - update to 3.45.0.9-10
PowerSwitch N2200-ON Series - update to 3.45.5.1-31
PowerSwitch Z9432F-ON - update to 3.51.5.1-18
PowerSwitch S5448F-ON - update to 3.52.5.1-10
PowerSwitch E3200-ON Series - update to 3.57.5.1-4
HPE SimpliVity 380 Gen10 Plus - update to 2023_0913
HPE SimpliVity 170r Gen10 Server - update to 2023_0913
HPE SimpliVity 190r Gen10 Server - update to 2023_0913
HPE SimpliVity 380 Gen10 H - update to 2023_0913
HPE SimpliVity 380 Gen10 G - update to 2023_0913
HPE SimpliVity 380 Gen10 - update to 2023_0913

External References

Related Security Bulletins