#VU72448 Improper access control in Intel products - CVE-2022-21216
Published: February 21, 2023
Vulnerability identifier: #VU72448
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2022-21216
CWE-ID: CWE-284
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerable software:
3rd Generation Intel Xeon Scalable Processors
Intel Atom Processor P5900
Intel Atom Processor P5300
Intel Atom Processor C5300
3rd Generation Intel Xeon Scalable Processors
Intel Atom Processor P5900
Intel Atom Processor P5300
Intel Atom Processor C5300
Software vendor:
Intel
Intel
Description
The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in out-of-band management in Intel processors. A remote privileged user on the local network can bypass implemented security restrictions and gain unauthorized access to the application.
Remediation
Install updates from vendor's website.