mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 09:11:28 +00:00
267 lines
9.2 KiB
JSON
267 lines
9.2 KiB
JSON
{
|
|
"id": "CVE-2022-34657",
|
|
"sourceIdentifier": "secure@intel.com",
|
|
"published": "2023-08-11T03:15:12.570",
|
|
"lastModified": "2023-11-07T03:48:44.480",
|
|
"vulnStatus": "Modified",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Una validaci\u00f3n de entrada incorrecta en el firmware de algunas BIOS Intel(R) PCSD anteriores a la versi\u00f3n 02.01.0013 puede permitir a un usuario con privilegios la divulgaci\u00f3n potencial de informaci\u00f3n mediante acceso local."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 4.4,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 0.8,
|
|
"impactScore": 3.6
|
|
},
|
|
{
|
|
"source": "secure@intel.com",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
|
|
"attackVector": "LOCAL",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "HIGH",
|
|
"userInteraction": "NONE",
|
|
"scope": "CHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "NONE",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 6.0,
|
|
"baseSeverity": "MEDIUM"
|
|
},
|
|
"exploitabilityScore": 1.5,
|
|
"impactScore": 4.0
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-20"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "secure@intel.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-20"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"operator": "AND",
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1208wfqysr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "85763067-E9E5-4418-A51F-FF3DD3710F9B"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1208wftys:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F1DD69C7-9E7C-4569-9971-A06F77028BB7"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1208wftysr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3506908A-8081-4ADA-A986-E02415956AB4"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1304wf0ys:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0DEF6206-E94C-4C16-8D91-AD776D62F79F"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1304wf0ysr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "A1E6AFA4-49E7-4191-9EA2-7E2EE269067B"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1304wftys:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "0A47AC30-315C-4E4B-BBBB-305FA5131281"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r1304wftysr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "48054F35-53C1-4480-86E2-CB8260DD84B6"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wf0zs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "EF575955-C7E1-4DD6-8AAE-5930EDFEDA93"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wf0zsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "8029A5F9-E999-4BA9-AA77-14A73B83454E"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wfqzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "3B83196F-06BD-41D6-A6B8-C7ABD25CA238"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wfqzsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "07C54A6D-7193-4AC3-A1E5-3CE16DF54FCB"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wftzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "30E49457-D38D-4145-81F2-7FA4D463CD24"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2208wftzsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7BB1E675-B059-4F28-8EBA-9FA5EF6E4044"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2224wfqzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "13C6540A-C5E4-46E5-BB7C-E4C53904AE68"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2224wftzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D952C1D5-581F-4ADC-8DB5-3682DC8588CA"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2224wftzsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "7D6DFA67-F1EE-4DBB-8E7B-CCDF097DC8BE"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2308wftzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "31EF6A93-7FDE-43A7-BB5D-1DD52318F60D"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2308wftzsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F3183B56-D5BB-4010-B2EE-3427D796D2A1"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2312wf0np:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "98B6DF59-DF1E-4D9C-B574-37DC398B16AB"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2312wf0npr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "931E4D81-FAF0-4BFF-92E0-D5F653C5E845"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2312wfqzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "6982CB5F-4448-48D4-BD3A-782874AB2304"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2312wftzs:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "B14E3D1D-B614-458D-8F78-E25CC89B311E"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:r2312wftzsr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "81818501-4F4A-4CED-895D-84D6DC139811"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wf0:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "5D8B99E9-63EF-45FA-AD23-1CEBDB3DD41E"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wf0r:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "C74211C3-3F9D-41E8-AB5B-16205AD90B64"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wfq:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "F105271A-9DC1-42CE-9D19-E4A55BE1F04E"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wfqr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "FC998F55-2B5C-418D-9B17-23A05C75F454"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wft:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "D4BEA962-CEFF-429C-BB64-1C3FEA98FCE9"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wftf:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "DDADADBF-BF1E-4337-A622-79A59A013745"
|
|
},
|
|
{
|
|
"vulnerable": false,
|
|
"criteria": "cpe:2.3:h:intel:s2600wftr:-:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "51C622C8-95E1-4A7F-B3E1-4199310CF4E8"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:intel:pcsd_bios:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "02.01.0013",
|
|
"matchCriteriaId": "5F1E0B49-1018-4E99-979A-BA01E85B0387"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00742.html",
|
|
"source": "secure@intel.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |