CVE-2022-30542: Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a p...

Summary

Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
intel	s2600wf_firmware	<= 02.01.0014 `cpe:2.3:o:intel:s2600wf_firmware::::::::`
intel	r1000wf_firmware	<= 02.01.0014 `cpe:2.3:o:intel:r1000wf_firmware::::::::`
intel	r2000wf_firmware	<= 02.01.0014 `cpe:2.3:o:intel:r2000wf_firmware::::::::`

Original advisory text

Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a p...

Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.... Patch Vendor Advisory