CVE-2022-33945
High
Description
Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
SeverityHigh
CVSS8.2
Exploit probability—
ProductIntel Server Board M70klp2sb Firmware
PublishedNov 14, 2023
First seenNov 14, 2023
Weakness typeCWE-20Improper input validation
How to fix
Update
- intel server_board_m70klp2sb_firmware01.04.0022 or later
- intel server_system_m70klp4s2uhh_firmware01.04.0022 or later
- intel server_board_m20ntp2sb_firmware0022.d02 or later
- intel server_system_m20ntp1ur304_firmware0022.d02 or later
- intel server_board_m10jnp2sb_firmware7.219 or later
- intel server_board_s2600bpbr_firmware02.01.0015 or later
- intel server_board_s2600bps_firmware02.01.0015 or later
- intel server_board_s2600bpsr_firmware02.01.0015 or later
- intel server_board_s2600bpqr_firmware02.01.0015 or later
- intel server_board_s2600bpb_firmware02.01.0015 or later
- intel server_board_s2600bpq_firmware02.01.0015 or later
- intel compute_module_hns2600bpblcr_firmware02.01.0015 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| intel server_board_m70klp2sb_firmware | v < 01.04.0022 | 01.04.0022 |
| intel server_system_m70klp4s2uhh_firmware | v < 01.04.0022 | 01.04.0022 |
| intel server_board_m20ntp2sb_firmware | v < 0022.d02 | 0022.d02 |
| intel server_system_m20ntp1ur304_firmware | v < 0022.d02 | 0022.d02 |
| intel server_board_m10jnp2sb_firmware | v < 7.219 | 7.219 |
| intel server_board_s2600bpbr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bps_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpsr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpqr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpb_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_board_s2600bpq_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblcr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpbr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpqr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpsr_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bps24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq24r_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpb24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpb_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpblc24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_hns2600bpq24_firmware | v < 02.01.0015 | 02.01.0015 |
| intel compute_module_liquid-cooled_hns2600bpbrct_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_vrn2224bpaf6_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_vrn2224bphy6_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_mcb2208wfaf5_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bpaf2_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bphy1_firmware | v < 02.01.0015 | 02.01.0015 |
| intel server_system_zsb2224bpaf1_firmware | v < 02.01.0015 | 02.01.0015 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.