Medium severity · published May 12, 2022
CVE-2022-0004
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user…
6.8
CVSS
0.3%
EPSS
No
On KEV
Description
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 20% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Core I3-11100b Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I3-11100he Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I3-12100 Firmware · Intel
before 16.0.15 · source: NVD
CI
Core I3-12100f Firmware · Intel
before 16.0.15 · source: NVD
CI
Core I3-12100t Firmware · Intel
before 16.0.15 · source: NVD
CI
Core I3-12300 Firmware · Intel
before 16.0.15 · source: NVD
CI
Core I3-12300t Firmware · Intel
before 16.0.15 · source: NVD
CI
Core I5-11260h Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I5-11300h Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I5-11320h Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I5-11400 Firmware · Intel
before 15.0.40 · source: NVD
CI
Core I5-11400f Firmware · Intel
before 15.0.40 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-0004
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-0004
Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html
More from Core I3-11100b Firmware
2.4
CVE-2022-0005
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information…