Intel BIOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Summary

Product

Vulnerabilities 2

• High 8.2
  CVE-2022-26006

  Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  Nov 11, 2022
• High 7.9
  CVE-2022-21198

  Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user …

  Nov 11, 2022

Revision history

1. 2024-06-26 #6

   Neue Updates von Dell aufgenommen

2. 2023-10-08 #5

   Neue Updates von HP aufgenommen

3. 2023-06-01 #4

   Neue Updates von F5 aufgenommen

4. 2023-03-16 #3

   Neue Updates von HP aufgenommen

5. 2022-11-09 #2

   Neue Updates von HP aufgenommen

6. 2022-11-08 #1

   Initiale Fassung

References

• Intel Security Advisory INTEL-SA-00688 vom 2022-11-08
  https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html
• HP Security Bulletin HPSBHF03819 vom 2022-11-10
  https://support.hp.com/us-en/document/ish_7176998-7177022-16/HPSBHF03819
• HPE Securi+y Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04379en_us
• F5 Security Advisory K000130240 vom 2023-06-02
  https://my.f5.com/manage/s/article/K000130240
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04380en_us
• HPE Security Bulletin
  https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04374en_us
• Dell Security Advisory DSA-2024-250 vom 2024-06-27
  https://www.dell.com/support/kbdoc/de-de/000226426/dsa-2024-250-security-update-for-dell-avamar-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities