Vulnerability identifier: #VU63179
Vulnerability risk: Low
Exploitation vector: Local
Exploit availability: No
The vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to insufficient validation of user-supplied input in the BIOS authenticated code module. A local user can pass specially crafted data to the affected module and execute arbitrary code on the system with elevated privileges.
Install updates from vendor's website.
Vulnerable software versions
2nd Generation Intel Xeon Scalable Processors: All versions
3rd Generation Intel Xeon Scalable Processors: All versions
Can this vulnerability be exploited remotely?
Is there known malware, which exploits this vulnerability?