Medium severity · published Aug 11, 2023
CVE-2022-40982
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to…
6.5
CVSS
3%
EPSS
No
On KEV
Description
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)3.0% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Celeron G5900 Firmware · Intel
All versions, or not specified · source: NVD
CG
Celeron G5900t Firmware · Intel
All versions, or not specified · source: NVD
CG
Celeron G5905 Firmware · Intel
All versions, or not specified · source: NVD
CG
Celeron G5905t Firmware · Intel
All versions, or not specified · source: NVD
CG
Celeron G5920 Firmware · Intel
All versions, or not specified · source: NVD
CG
Celeron G5925 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-10100 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-10100t Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-10300 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-10300t Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I3-10320 Firmware · Intel
All versions, or not specified · source: NVD
CI
Core I5-11400 Firmware · Intel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-40982
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-40982
Exploit
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html
Third Party Advisory
https://access.redhat.com/solutions/7027704
Third Party Advisory
https://aws.amazon.com/security/security-bulletins/AWS-2023-007/
Exploit
https://downfall.page
Mailing List
https://lists.debian.org/debian-lts-announce/2023/08/msg00013.html
lists.debian.org
https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html
More from Celeron G5900 Firmware
2.4
CVE-2022-0005
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information…