CVEvulnerability

CVE-2022-29510

6.7 MEDIUM Published 2023-11-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-11-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-119, CWE-92

Description

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

• intel compute module hns2600bp firmware (< 02.01.0015) • intel compute module hns2600bpb firmware (< 02.01.0015) • intel compute module hns2600bpb24 firmware (< 02.01.0015) • intel compute module hns2600bpb24r firmware (< 02.01.0015) • intel compute module hns2600bpblc firmware (< 02.01.0015) • intel compute module hns2600bpblc24 firmware (< 02.01.0015) • intel compute module hns2600bpblc24r firmware (< 02.01.0015) • intel compute module hns2600bpblcr firmware (< 02.01.0015) • intel compute module hns2600bpbr firmware (< 02.01.0015) • intel compute module hns2600bpbrct firmware (< 02.01.0015) • intel compute module hns2600bpq firmware (< 02.01.0015) • intel compute module hns2600bpq24 firmware (< 02.01.0015) • intel compute module hns2600bpq24r firmware (< 02.01.0015) • intel compute module hns2600bpqr firmware (< 02.01.0015) • intel compute module hns2600bpr firmware (< 02.01.0015) • intel compute module hns2600bps firmware (< 02.01.0015) • intel compute module hns2600bps24 firmware (< 02.01.0015) • intel compute module hns2600bps24r firmware (< 02.01.0015) • intel compute module hns2600bpsr firmware (< 02.01.0015) • intel server board m10jnp2sb firmware (< 7.219) • intel server board m20ntp2sb firmware (< 0022.d02) • intel server board m70klp2sb firmware (< 01.04.0029) • intel server board s2600bpb firmware (< 02.01.0015) • intel server board s2600bpbr firmware (< 02.01.0015) • intel server board s2600bpq firmware (< 02.01.0015) • intel server board s2600bpqr firmware (< 02.01.0015) • intel server board s2600bps firmware (< 02.01.0015) • intel server board s2600bpsr firmware (< 02.01.0015) • intel server system m20ntp1ur304 firmware (< 0022.d02) • intel server system m70klp4s2uhh firmware (< 01.04.0029) • intel server system mcb2208wfaf5 firmware (< 02.01.0015) • intel server system vrn2224bpaf6 firmware (< 02.01.0015) • intel server system vrn2224bphy6 firmware (< 02.01.0015) • intel server system zsb2224bpaf1 firmware (< 02.01.0015) • intel server system zsb2224bpaf2 firmware (< 02.01.0015) • intel server system zsb2224bphy1 firmware (< 02.01.0015)

Related

Weakness · not in database (1)

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References