CVE-2022-29510
High
Description
Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS7.5
Exploit probability9. percentile0.2%
ProductIntel Server Board M10jnp2sb Firmware
PublishedNov 14, 2023
First seenNov 14, 2023
Weakness typeCWE-92CWE-92
How to fix
Update
- intel server_board_m10jnp2sb_firmware7.219 or later
- intel compute_module_hns2600bp_firmware02.01.0015 or later
- intel compute_module_hns2600bpb_firmware02.01.0015 or later
- intel compute_module_hns2600bpb24_firmware02.01.0015 or later
- intel compute_module_hns2600bpb24r_firmware02.01.0015 or later
- intel compute_module_hns2600bpblc_firmware02.01.0015 or later
- intel compute_module_hns2600bpblc24_firmware02.01.0015 or later
- intel compute_module_hns2600bpblc24r_firmware02.01.0015 or later
- intel compute_module_hns2600bpblcr_firmware02.01.0015 or later
- intel compute_module_hns2600bpbr_firmware02.01.0015 or later
- intel compute_module_hns2600bpbrct_firmware02.01.0015 or later
- intel compute_module_hns2600bpq_firmware02.01.0015 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_board_m10jnp2sb_firmware | v < 7.219 | 7.219 |
| intel compute_module_hns2600bp_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpb_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpb24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpb24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblcr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpbr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpbrct_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpqr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpsr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_m20ntp2sb_firmware | v < 0022.d02 | 0022.d02 |
| intel server_board_m70klp2sb_firmware | v < 01.04.0029 | 01.04.0029 |
| intel server_board_s2600bpb_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpbr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpq_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpqr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bps_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpsr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_m20ntp1ur304_firmware | v < 0022.d02 | 0022.d02 |
| intel server_system_m70klp4s2uhh_firmware | v < 01.04.0029 | 01.04.0029 |
| intel server_system_mcb2208wfaf5_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_vrn2224bpaf6_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_vrn2224bphy6_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bpaf1_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bpaf2_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bphy1_firmware | v < 02.01.0015 | 02.01.0015 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.