PT-2022-3556 · Ami · Ami Aptiov

Published 2022-04-28 · Updated 2022-09-26 · CVE-2022-26873

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AMI Aptio versions 5.x

Description A potential attacker can execute arbitrary code at the time of the PEI phase and influence subsequent boot stages, leading to mitigations bypassing, physical memory contents disclosure, discovery of secrets from Virtual Machines (VMs), and bypassing memory isolation and confidential computing boundaries. An attacker can also build a payload to be injected into the SMRAM memory. This issue is related to the PlatformInitAdvancedPreMem module.

Recommendations For AMI Aptio versions 5.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Uncontrolled Search Path Element

Weakness Enumeration

CWE-787

CWE-121

CWE-427

Related Identifiers

BDU:2022-04340

CVE-2022-26873

Affected Products

Ami Aptiov

References · 11

• 🔥 https://binarly.io/advisories/BRLY-2022-027 · Exploit
• https://osv.dev/vulnerability/CVE-2022-26873 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-04340 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-26873 · Security Note
• https://ami.com/security-center · Vendor Advisory
• https://codereview.qt-project.org/gitweb?p=qt%2Fqttools.git&a=commit&h=c2952ff8df1e18fe0120d8b29901b0b794afccc7 · Note
• https://doc.qt.io/qt-5/windows-deployment.html · Note
• https://t.me/cibsecurity/50147 · Telegram Post
• https://bugreports.qt.io/browse/QTBUG-15234 · Note
• https://codereview.qt-project.org/gitweb?p=qt%2Fqttools.git&a=commit&h=c2952ff8df1e18fe0120d8b29901b0b794afccc7 · Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html · Note