CVE-2022-25917

Medium

Description

Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access.

SeverityMedium
CVSS6.0
Exploit probability—
ProductIntel M50cyp1ur204 Firmware
PublishedNov 11, 2022
First seenNov 11, 2022
Weakness typeCWE-755CWE-755

How to fix

Update
  • intel m50cyp1ur204_firmware01.01.0005 or later
  • intel m50cyp1ur212_firmware01.01.0005 or later
  • intel m50cyp2ur208_firmware01.01.0005 or later
  • intel m50cyp2ur312_firmware01.01.0005 or later

Affected products

ProductAffected versionsFixed in
intel m50cyp1ur204_firmwarev < 01.01.000501.01.0005
intel m50cyp1ur212_firmwarev < 01.01.000501.01.0005
intel m50cyp2ur208_firmwarev < 01.01.000501.01.0005
intel m50cyp2ur312_firmwarev < 01.01.000501.01.0005

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.