Medium severity · published Feb 16, 2023
CVE-2022-30704
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access
6.7
CVSS
0.2%
EPSS
No
On KEV
Description
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CI
Core I3-11100he Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1110g4 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1115g4 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1115g4e Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1115gre Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1120g4 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-1125g4 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-11260h Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-11300h Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-1130g7 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-11320h Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-1135g7 Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-30704
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-30704
Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html
More from Core I3-11100he Firmware
7.8
CVE-2023-23583
Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or…
7.8
CVE-2021-33122
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access
7.8
CVE-2020-0110
In psi_write of psi.c, there is a possible out of bounds write due to a missing bounds check
6.8
CVE-2022-0004
Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Boot Guard and Intel(R) TXT may allow an unauthenticated user…
6.7
CVE-2021-33103
Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local…