Insufficient control flow management in Intel products - CVE-2022-43505

Vulnerability identifier: #VU79560

CSH Severity: Low

CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-43505

CWE-ID: CWE-691

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient control flow management in the BIOS firmware. A local user can perform a denial of service (DoS) attack.

Intel Xeon D Processors
Intel Atom Processor A Series
3rd Generation Intel Xeon Scalable Processors
Intel Atom Processor C3XXX
Intel Xeon D-1633N Processor
Intel Xeon Processor E3 v6 Family
Intel Core Processors with Intel Hybrid Technology
Intel Xeon Processor E7 v4 Family
Intel Xeon Processor E7 v3 Family
2nd Generation Intel Xeon Scalable Processors
Intel Xeon Processor E5 v4 Family
Intel Xeon Processor E5 v3 Family
Intel Pentium Processor Silver Series
Intel Celeron Processor J Series
Intel Celeron Processor N Series
10th Generation Intel Core Processors
7th Generation Intel Core Processors
Intel Xeon W Processors
Intel Core X-series Processor
Intel Pentium Gold Processor Series
Intel Celeron Processor G Series
8th Generation Intel Core Processors
HPE ProLiant m750 Server Blade
HPE StoreEasy 1660 Storage
HPE ProLiant XL290n Gen10 Plus Server
HPE ProLiant XL220n Gen10 Plus Server
HPE Apollo 2000 Gen10 Plus System
HPE StoreEasy 1860 Storage
HPE ProLiant DX380 Gen10 Plus server
HPE ProLiant DX360 Gen10 Plus server
HPE ProLiant DX220n Gen10 Plus server
HPE Apollo 4200 Gen10 Plus System
Dell Edge Gateway 3200
Dell SD-WAN Edge 600
Dell EMC Networking VEP1425/VEP1445/VEP1485
HPE ProLiant e910 Server Blade
HPE ProLiant e910t Server Blade
Precision 7920 Rack
Precision 7920 XL Rack
Precision 7960 XL Rack
HPE StoreEasy 1660 Performance Storage
HPE StoreEasy 1660 Expanded Storage
HPE StoreEasy 1860 Performance Storage
HPE Apollo 4510 Gen10 System
HPE ProLiant XL230k Gen10 Server
HPE ProLiant XL450 Gen10 Server
HPE ProLiant XL190r Gen10 Server
HPE ProLiant XL170r Gen10 Server
HPE ProLiant XL270d Gen10 Server
HPE Apollo 4200 Gen10 Server
HPE Storage Performance File Controller
HPE Storage File Controller
HPE StoreEasy 1460 Storage
HPE StoreEasy 1560 Storage
HPE Apollo 6500 Gen10 System
HPE ProLiant BL460c Gen10 Server Blade
HPE Synergy 480 Gen10 Compute Module
HPE ProLiant DX170r Gen10 server
HPE ProLiant DX190r Gen10 server
HPE ProLiant DX560 Gen10 server
HPE ProLiant DX4200 Gen10 server
HPE ProLiant DX380 Gen10 server
HPE ProLiant DX360 Gen10 server
HPE Synergy 660 Gen10 Compute Module
PowerSwitch Z9264F-ON
PowerSwitch N3200-ON Series
PowerSwitch N2200-ON Series
PowerSwitch Z9432F-ON
PowerSwitch S5448F-ON
PowerSwitch E3200-ON Series
Dell Networking VEP4600 4 Core
Dell Networking VEP4600 8 Core
Dell Networking VEP4600 16 Core
HPE SimpliVity 380 Gen10 Plus
HPE SimpliVity 170r Gen10 Server
HPE SimpliVity 190r Gen10 Server
HPE SimpliVity 380 Gen10 H
HPE SimpliVity 380 Gen10 G
HPE SimpliVity 380 Gen10
Intel Pentium Processor J Series
Intel Pentium Processor N Series
Intel Atom Processor E3900 Series
Intel Xeon Scalable Processors
9th Generation Intel Core Processors
PowerEdge T30 Mini Tower Server
HPE Synergy 480 Gen10 Plus Compute Module
Precision 7960 Rack
Disk Library for mainframe (DLm)

Install updates from vendor's website.

PowerEdge T30 Mini Tower Server - update to 1.12.0
HPE ProLiant m750 Server Blade - update to 1.60_07-24-2023
HPE StoreEasy 1660 Storage - update to 1.80_07-05-2023
HPE ProLiant XL290n Gen10 Plus Server - update to 1.80_07-05-2023
HPE ProLiant XL220n Gen10 Plus Server - update to 1.80_07-05-2023
HPE Apollo 2000 Gen10 Plus System - update to 1.80_07-05-2023
HPE StoreEasy 1860 Storage - update to 1.80_07-05-2023
HPE ProLiant DX380 Gen10 Plus server - update to 1.80_07-05-2023
HPE ProLiant DX360 Gen10 Plus server - update to 1.80_07-05-2023
HPE ProLiant DX220n Gen10 Plus server - update to 1.80_07-05-2023
HPE Synergy 480 Gen10 Plus Compute Module - update to 1.80_07-05-2023
HPE Apollo 4200 Gen10 Plus System - update to 1.80_07-05-2023
Dell Edge Gateway 3200 - update to 2.00.10
Dell SD-WAN Edge 600 - update to 2.6
Dell EMC Networking VEP1425/VEP1445/VEP1485 - update to 2.6
HPE ProLiant e910 Server Blade - update to 2.08_07-24-2023
HPE ProLiant e910t Server Blade - update to 2.08_07-24-2023
Precision 7920 Rack - update to 2.19.1
Precision 7920 XL Rack - update to 2.19.1
Precision 7960 Rack - update to 2.19.1
Precision 7960 XL Rack - update to 2.19.1
HPE StoreEasy 1660 Performance Storage - update to 2.90_07-20-2023
HPE StoreEasy 1660 Expanded Storage - update to 2.90_07-20-2023
HPE StoreEasy 1860 Performance Storage - update to 2.90_07-20-2023
HPE Apollo 4510 Gen10 System - update to 2.90_07-20-2023
HPE ProLiant XL230k Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL450 Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL190r Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL170r Gen10 Server - update to 2.90_07-20-2023
HPE ProLiant XL270d Gen10 Server - update to 2.90_07-20-2023
HPE Apollo 4200 Gen10 Server - update to 2.90_07-20-2023
HPE Storage Performance File Controller - update to 2.90_07-20-2023
HPE Storage File Controller - update to 2.90_07-20-2023
HPE StoreEasy 1460 Storage - update to 2.90_07-20-2023
HPE StoreEasy 1560 Storage - update to 2.90_07-20-2023
HPE Apollo 6500 Gen10 System - update to 2.90_07-20-2023
HPE ProLiant BL460c Gen10 Server Blade - update to 2.90_07-20-2023
HPE Synergy 480 Gen10 Compute Module - update to 2.90_07-20-2023
HPE ProLiant DX170r Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX190r Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX560 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX4200 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX380 Gen10 server - update to 2.90_07-20-2023
HPE ProLiant DX360 Gen10 server - update to 2.90_07-20-2023
HPE Synergy 660 Gen10 Compute Module - update to 2.90_07-20-2023
PowerSwitch Z9264F-ON - update to 3.42.5.1-19
PowerSwitch N3200-ON Series - update to 3.45.0.9-10
PowerSwitch N2200-ON Series - update to 3.45.5.1-31
PowerSwitch Z9432F-ON - update to 3.51.5.1-18
PowerSwitch S5448F-ON - update to 3.52.5.1-10
PowerSwitch E3200-ON Series - update to 3.57.5.1-4
Dell Networking VEP4600 4 Core - update to 4.3
Dell Networking VEP4600 8 Core - update to 4.3
Dell Networking VEP4600 16 Core - update to 4.3
Disk Library for mainframe (DLm) - update to 5.5.0.4
HPE SimpliVity 380 Gen10 Plus - update to 2023_0913
HPE SimpliVity 170r Gen10 Server - update to 2023_0913
HPE SimpliVity 190r Gen10 Server - update to 2023_0913
HPE SimpliVity 380 Gen10 H - update to 2023_0913
HPE SimpliVity 380 Gen10 G - update to 2023_0913
HPE SimpliVity 380 Gen10 - update to 2023_0913

• http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html

• Multiple vulnerabilities in Intel BIOS firmware
• Multiple vulnerabilities in Dell PowerEdge T30 Mini Tower Server
• Multiple vulnerabilities in HPE SimpliVity servers
• Multiple vulnerabilities in Dell Disk Library for mainframe (DLm)
• Multiple vulnerabilities in Certain HPE Synergy Servers Using Certain Intel Processors
• Multiple vulnerabilities in Certain HPE ProLiant DX Servers Using Certain Intel Processors
• Multiple vulnerabilities in Certain HPE Moonshot/Edgeline Servers Using Certain Intel Processors
• Multiple vulnerabilities in Certain HPE StoreEasy Servers Using Certain Intel Processors
• Multiple vulnerabilities in Dell Precision Rack BIOS
• Multiple vulnerabilities in Certain HPE Apollo, XL Servers Using Certain Intel Processors
• Multiple vulnerabilities in Dell Networking Products