Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-21216: Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privile...

CVE-2022-21216 · published 3 years ago

Summary

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
intel	xeon_gold_5315y_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5315y_firmware:-:::::::*`
intel	xeon_gold_5317_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5317_firmware:-:::::::*`
intel	xeon_gold_5318n_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5318n_firmware:-:::::::*`
intel	xeon_gold_5318s_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5318s_firmware:-:::::::*`
intel	xeon_gold_5318y_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5318y_firmware:-:::::::*`
intel	xeon_gold_5320_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5320_firmware:-:::::::*`
intel	xeon_gold_5320t_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5320t_firmware:-:::::::*`
intel	xeon_gold_6312u_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6312u_firmware:-:::::::*`
intel	xeon_gold_6314u_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6314u_firmware:-:::::::*`
intel	xeon_gold_6326_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6326_firmware:-:::::::*`
intel	xeon_gold_6330_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6330_firmware:-:::::::*`
intel	xeon_gold_6330n_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6330n_firmware:-:::::::*`
intel	xeon_gold_6334_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6334_firmware:-:::::::*`
intel	xeon_gold_6336y_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6336y_firmware:-:::::::*`
intel	xeon_gold_6338_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6338_firmware:-:::::::*`
intel	xeon_gold_6338n_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6338n_firmware:-:::::::*`
intel	xeon_gold_6338t_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6338t_firmware:-:::::::*`
intel	xeon_gold_6342_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6342_firmware:-:::::::*`
intel	xeon_gold_6346_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6346_firmware:-:::::::*`
intel	xeon_gold_6348_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6348_firmware:-:::::::*`
intel	xeon_gold_6354_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6354_firmware:-:::::::*`
intel	xeon_platinum_8351n_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8351n_firmware:-:::::::*`
intel	xeon_platinum_8352m_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8352m_firmware:-:::::::*`
intel	xeon_platinum_8352s_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8352s_firmware:-:::::::*`
intel	xeon_platinum_8352v_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8352v_firmware:-:::::::*`
intel	xeon_platinum_8352y_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8352y_firmware:-:::::::*`
intel	xeon_platinum_8358_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8358_firmware:-:::::::*`
intel	xeon_platinum_8358p_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8358p_firmware:-:::::::*`
intel	xeon_platinum_8360y_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8360y_firmware:-:::::::*`
intel	xeon_platinum_8362_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8362_firmware:-:::::::*`
intel	xeon_platinum_8368_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8368_firmware:-:::::::*`
intel	xeon_platinum_8368q_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8368q_firmware:-:::::::*`
intel	xeon_platinum_8380_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8380_firmware:-:::::::*`
intel	xeon_silver_4309y_firmware	All versions `cpe:2.3:o:intel:xeon_silver_4309y_firmware:-:::::::*`
intel	xeon_silver_4310_firmware	All versions `cpe:2.3:o:intel:xeon_silver_4310_firmware:-:::::::*`
intel	xeon_silver_4310t_firmware	All versions `cpe:2.3:o:intel:xeon_silver_4310t_firmware:-:::::::*`
intel	xeon_silver_4314_firmware	All versions `cpe:2.3:o:intel:xeon_silver_4314_firmware:-:::::::*`
intel	xeon_silver_4316_firmware	All versions `cpe:2.3:o:intel:xeon_silver_4316_firmware:-:::::::*`
intel	xeon_gold_6330h_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6330h_firmware:-:::::::*`
intel	xeon_platinum_8356h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8356h_firmware:-:::::::*`
intel	xeon_platinum_8360h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8360h_firmware:-:::::::*`
intel	xeon_platinum_8360hl_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8360hl_firmware:-:::::::*`
intel	xeon_gold_5318h_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5318h_firmware:-:::::::*`
intel	xeon_gold_5320h_firmware	All versions `cpe:2.3:o:intel:xeon_gold_5320h_firmware:-:::::::*`
intel	xeon_gold_6328h_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6328h_firmware:-:::::::*`
intel	xeon_gold_6328hl_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6328hl_firmware:-:::::::*`
intel	xeon_gold_6348h_firmware	All versions `cpe:2.3:o:intel:xeon_gold_6348h_firmware:-:::::::*`
intel	xeon_platinum_8353h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8353h_firmware:-:::::::*`
intel	xeon_platinum_8354h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8354h_firmware:-:::::::*`
intel	xeon_platinum_8376h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8376h_firmware:-:::::::*`

Showing 50 of 66. Show the rest

Vendor	Product	Affected versions
intel	xeon_platinum_8376hl_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8376hl_firmware:-:::::::*`
intel	xeon_platinum_8380h_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8380h_firmware:-:::::::*`
intel	xeon_platinum_8380hl_firmware	All versions `cpe:2.3:o:intel:xeon_platinum_8380hl_firmware:-:::::::*`
intel	atom_p5962b_firmware	All versions `cpe:2.3:o:intel:atom_p5962b_firmware:-:::::::*`
intel	atom_p5942b_firmware	All versions `cpe:2.3:o:intel:atom_p5942b_firmware:-:::::::*`
intel	atom_p5931b_firmware	All versions `cpe:2.3:o:intel:atom_p5931b_firmware:-:::::::*`
intel	atom_p5921b_firmware	All versions `cpe:2.3:o:intel:atom_p5921b_firmware:-:::::::*`
intel	atom_p5362_firmware	All versions `cpe:2.3:o:intel:atom_p5362_firmware:-:::::::*`
intel	atom_p5352_firmware	All versions `cpe:2.3:o:intel:atom_p5352_firmware:-:::::::*`
intel	atom_p5342_firmware	All versions `cpe:2.3:o:intel:atom_p5342_firmware:-:::::::*`
intel	atom_p5332_firmware	All versions `cpe:2.3:o:intel:atom_p5332_firmware:-:::::::*`
intel	atom_p5322_firmware	All versions `cpe:2.3:o:intel:atom_p5322_firmware:-:::::::*`
intel	atom_c5325_firmware	All versions `cpe:2.3:o:intel:atom_c5325_firmware:-:::::::*`
intel	atom_c5320_firmware	All versions `cpe:2.3:o:intel:atom_c5320_firmware:-:::::::*`
intel	atom_c5315_firmware	All versions `cpe:2.3:o:intel:atom_c5315_firmware:-:::::::*`
intel	atom_c5310_firmware	All versions `cpe:2.3:o:intel:atom_c5310_firmware:-:::::::*`

Original advisory text

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.8 Medium

Exploitation

<1% chance of attack within 30 days

Timeline

Published16 Feb 2023

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2022-21216 · NVD

Track software like this

Free during beta