CVE-2022-29494

Опубликовано: 16 фев. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access.

Ссылки

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:intel:openbmc:*:*:*:*:*:*:*:*

Версия до wht-1.01-61_0.72 (исключая)

Одно из

cpe:2.3:h:intel:c621a:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:c627a:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:c629a:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5315y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5317:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5318h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5318n:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5318s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5318y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5320:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5320h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_5320t:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6312u:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6314u:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6326:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6328h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6328hl:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6330:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6330h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6330n:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6334:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6336y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6338:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6338n:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6338t:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6342:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6346:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6348:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6348h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_gold_6354:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8351n:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8352m:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8352s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8352v:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8352y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8353h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8354h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8356h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8358:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8358p:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8360h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8360hl:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8360y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8362:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8368:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8368q:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8376h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8376hl:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8380:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8380h:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_platinum_8380hl:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4309y:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4310:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4310t:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4314:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:xeon_silver_4316:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:intel:openbmc:*:*:*:*:*:*:*:*

Версия до egs-0.91-179 (исключая)

cpe:2.3:h:intel:c741:-:*:*:*:*:*:*:*

EPSS

Процентиль: 38%

0.00161

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-hwvq-chp2-hrj5