CVE-2022-21131
Medium
Published: 12 May 2022
Published
12 May 2022
Modified
05 May 2025
KEV Added
—
Patch
—
CVSS Score v3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.0010
27.4th percentile
Risk Priority
11
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-21131 is a medium-severity an unspecified weakness vulnerability in Intel Core I9-7940X Firmware. Its CVSS base score is 5.5 (Medium).
Operationally, ranked at the 27.4th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-26378
Vulnerability details
Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
core i9-7940x firmware
all versions
intel
core i9-7960x firmware
all versions
intel
core i9-7980xe firmware
all versions
intel
core i9-7920x firmware
all versions
intel
core i9-7900x firmware
all versions
intel
xeon gold 6138p firmware
all versions
intel
xeon bronze 3104 firmware
all versions
intel
xeon bronze 3106 firmware
all versions
intel
xeon gold 5115 firmware
all versions
intel
xeon gold 5118 firmware
all versions
+136 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.