High WID-SEC-2023-0374 6 CVEs

Intel BIOS: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Feb 14, 2023 · Updated Jan 22, 2026 · Revision 8 · de-DE

Vendor: Dell Vendor: EMC Vendor: F5 Vendor: HP Vendor: HPE Vendor: Intel Product: Avamar Product: BIG-IP Product: BIOS Product: BIOS Product: Computer Product: Computer Product: PowerEdge Product: ProLiant Product: Synergy

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen im BIOS für verschiedene Intel Prozessoren ausnutzen, um seine Privilegien zu erhöhen.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 6

High 8.2

CVE-2022-26343

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

Feb 16, 2023
High 7.5

CVE-2022-26837

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

Feb 16, 2023
High 7.5

CVE-2022-30539

Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca…

Feb 16, 2023
High 7.5

CVE-2022-32231

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

Feb 16, 2023
High 7.2

CVE-2022-30704

Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to poten…

Feb 16, 2023
Low 3.2

CVE-2021-0187

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

Feb 16, 2023

Revision history

2026-01-22 #8
Neue Updates von Dell aufgenommen
2024-06-26 #7
Neue Updates von Dell aufgenommen
2023-05-29 #6
Neue Updates von HP aufgenommen
2023-04-24 #5
Neue Updates von F5 aufgenommen
2023-03-05 #4
Neue Updates von HP aufgenommen
2023-02-23 #3
Neue Updates von Dell aufgenommen
2023-02-16 #2
Neue Updates von HP aufgenommen
2023-02-14 #1
Initiale Fassung

References

Intel Security Advisory INTEL-SA-00717 vom 2023-02-14
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html
HP Security Bulletin HPSBHF03834 vom 2023-02-14
https://support.hp.com/us-en/document/ish_7679378-7679407-16/HPSBHF03834
HPE Security Bulletin HPESBHF04414 rev.1 vom 2023-02-15
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04414en_us
HPE Security Bulletin HPESBHF04434 rev.1 vom 2023-02-15
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04434en_us
Dell Security Advisory DSA-2023-049 vom 2023-02-23
https://www.dell.com/support/kbdoc/de-de/000208395/dsa-2023-049-dell-client-platform-security-update-for-multiple-intel-2023-1-ipu-vulnerabilities
Dell Security Advisory DSA-2023-015 vom 2023-02-23
https://www.dell.com/support/kbdoc/de-de/000209431/dsa-2023-015-dell-poweredge-t40-mini-tower-server-security-update-for-intel-february-2023-security-advisories-2023-1-ipu
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04440en_us
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04409en_us
F5 Security Advisory K000133630 vom 2023-04-24
https://my.f5.com/manage/s/article/K000133630
HPE Securi+y Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04451en_us&hprpt_id=ALERT_HPE_3049456&jumpid=em_pom8nu6hj_aid-520066529
Dell Security Advisory DSA-2024-250 vom 2024-06-27
https://www.dell.com/support/kbdoc/de-de/000226426/dsa-2024-250-security-update-for-dell-avamar-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities
Dell Security Advisory DSA-2023-014 vom 2026-01-22
https://www.dell.com/support/kbdoc/en-us/000209268/dsa-2023-014-dell-poweredge-server-security-update-for-intel-february-2023-security-advisories-2023-1-ipu