2025-02-05 17:04:15 +00:00

216 lines
5.9 KiB
JSON

{
"id": "CVE-2022-25917",
"sourceIdentifier": "secure@intel.com",
"published": "2022-11-11T16:15:11.880",
"lastModified": "2025-02-05T16:15:31.900",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access."
},
{
"lang": "es",
"value": "Una excepci\u00f3n no detectada en el firmware de Intel(R) Server Board M50CYP Family anteriores a la versi\u00f3n R01.01.0005 puede permitir que un usuario con privilegios habilite potencialmente una Denegaci\u00f3n de Servicio (DoS) a trav\u00e9s del acceso local."
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "secure@intel.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "CHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.5,
"impactScore": 4.0
},
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "HIGH",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 0.8,
"impactScore": 3.6
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-755"
}
]
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-755"
}
]
}
],
"configurations": [
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:intel:m50cyp1ur204_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "01.01.0005",
"matchCriteriaId": "0979A809-1DC9-4E8E-A0B1-9C6EDFAB9F8B"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:m50cyp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAECFA0D-0955-426B-9498-AE9550ED7C42"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:intel:m50cyp1ur212_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "01.01.0005",
"matchCriteriaId": "FC611F32-B9D3-4632-B16F-BE3937868D68"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:m50cyp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAECFA0D-0955-426B-9498-AE9550ED7C42"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:intel:m50cyp2ur208_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "01.01.0005",
"matchCriteriaId": "E16F32E1-B58F-4B09-BCF3-588427F5C264"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:m50cyp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAECFA0D-0955-426B-9498-AE9550ED7C42"
}
]
}
]
},
{
"operator": "AND",
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:intel:m50cyp2ur312_firmware:*:*:*:*:*:*:*:*",
"versionEndExcluding": "01.01.0005",
"matchCriteriaId": "463D3B56-DA45-406A-BF65-0C018957D9A5"
}
]
},
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": false,
"criteria": "cpe:2.3:h:intel:m50cyp:-:*:*:*:*:*:*:*",
"matchCriteriaId": "EAECFA0D-0955-426B-9498-AE9550ED7C42"
}
]
}
]
}
],
"references": [
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html",
"source": "secure@intel.com",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}