Medium WID-SEC-2023-2003 5 CVEs

Intel BIOS: Mehrere Schwachstellen

Published Aug 8, 2023 · Updated Jun 26, 2024 · Revision 7 · de-DE

Vendor: Dell Vendor: EMC Vendor: F5 Vendor: Fujitsu Vendor: HP Vendor: HPE Vendor: Intel Vendor: Lenovo Product: Avamar Product: BIG-IP Product: BIOS Product: BIOS Product: BIOS Product: BIOS Product: Computer Product: Computer Product: Computer Product: Eternus Product: PowerEdge Product: Primergy Product: ProLiant Product: Synergy

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel BIOS ausnutzen, um seine Privilegien zu erhöhen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

Product

Das BIOS ist die Firmware bei IBM PC kompatiblen Computern.

Vulnerabilities 5

High 7.2

CVE-2022-37343

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

Aug 11, 2023
Medium 6.9

CVE-2022-44611

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

Aug 11, 2023
Medium 6.1

CVE-2022-38083

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

Aug 11, 2023
Medium 5.3

CVE-2022-27879

Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potential…

Aug 11, 2023
Medium 4.1

CVE-2022-43505

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…

Aug 11, 2023

Revision history

2024-06-26 #7
Neue Updates von Dell aufgenommen
2024-06-13 #6
Neue Updates von Dell aufgenommen
2023-12-13 #5
Neue Updates von Dell aufgenommen
2023-12-06 #4
Neue Updates von Dell aufgenommen
2023-10-11 #3
Neue Updates von F5 aufgenommen
2023-08-10 #2
Neue Updates von HP aufgenommen
2023-08-08 #1
Initiale Fassung

References

Dell Security Advisory DSA-2023-180 vom 2023-12-14
https://www.dell.com/support/kbdoc/000216234/dsa-2023-=
Intel Security Advisory INTEL-SA-00813 vom 2023-08-08
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html
Fujitsu PSIRT Advisory ISS-IS-2023-031500 vom 2023-08-08
https://security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-ISS-IS-2023-031500-Security-Advisory.asp?lng=com
HP Security Bulletin HPSBHF03859 vom 2023-08-09
https://support.hp.com/us-en/document/ish_9021973-9021997-16/HPSBHF03859
Lenovo Security Advisory LEN-134879 vom 2023-08-09
https://support.lenovo.com/us/en/product_security/LEN-134879
HPE SEcurity Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04513en_us
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04506en_us
HPE Security Bulletin
https://support.hpe.com/hpesc/public/docDisplay?docId=emr_na-hpesbhf04509en_us
F5 Security Advisory K000137202 vom 2023-10-11
https://my.f5.com/manage/s/article/K000137202
Dell Security Advisory DSA-2023-457 vom 2023-12-07
https://www.dell.com/support/kbdoc/000220223/dsa-2023-=
Dell Security Advisory DSA-2023-206 vom 2024-06-13
https://www.dell.com/support/kbdoc/de-de/000216580/dsa-2023-206-security-update-for-dell-poweredge-server-for-intel-august-2023-security-advisories-2023-3-ipu
Dell Security Advisory DSA-2024-250 vom 2024-06-27
https://www.dell.com/support/kbdoc/de-de/000226426/dsa-2024-250-security-update-for-dell-avamar-dell-integrated-data-protection-appliance-idpa-security-update-for-multiple-vulnerabilities