CVE-2022-26343
High
Published: 16 February 2023
Published
16 February 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.2
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score
0.0008
22.8th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-26343 is a high-severity an unspecified weakness vulnerability in Intel Xeon Bronze 3104 Firmware. Its CVSS base score is 8.2 (High).
Operationally, ranked at the 22.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-30902
Vulnerability details
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
xeon bronze 3104 firmware
all versions
intel
xeon bronze 3106 firmware
all versions
intel
xeon bronze 3204 firmware
all versions
intel
xeon bronze 3206r firmware
all versions
intel
xeon d-1513n firmware
all versions
intel
xeon d-1518 firmware
all versions
intel
xeon d-1520 firmware
all versions
intel
xeon d-1521 firmware
all versions
intel
xeon d-1523n firmware
all versions
intel
xeon d-1527 firmware
all versions
+199 more product configuration(s) — see NVD for full list
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.