PT-2021-7214 · Intel · Intel Processors With Sgx

Ilya Alexandrovich · Published 2021-10-15 · Updated 2023-08-08 · CVE-2022-0005

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Processors with SGX (affected versions not specified)

Description The issue is related to the implementation of the JTAG interface in Intel microprogram software, which is associated with insufficient boundaries of the controlled system area. This may allow an unauthorized user to potentially enable information disclosure via physical access to sensitive information by physically probing the JTAG interface for some Intel Processors with SGX.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Incorrect Default Permissions

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-319

CWE-276

CWE-668

Related Identifiers

BDU:2022-03865

CVE-2022-0005

MGASA-2022-0193

Affected Products

Intel Processors With Sgx

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2022-0005 · Security Note
• https://advisories.mageia.org/MGASA-2022-0193.html · Security Note
• https://osv.dev/vulnerability/MGASA-2022-0193 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00614.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03865 · Security Note
• https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20220510 · Note
• https://t.me/cvenotify/30971 · Telegram Post
• https://vuldb.com/ru/?id.199739 · Note
• https://bugs.mageia.org/show_bug.cgi?id=30425 · Note
• https://access.redhat.com/security/cve/cve-2022-0005 · Note
• https://t.me/cibsecurity/42513 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00617.html · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00616.html · Note