PT-2023-12919 · Intel · Intel Processors

Yngweijw · Published 2023-08-10 · Updated 2023-08-24 · CVE-2022-27879

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) Processors (affected versions not specified)

Description The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to potentially enable information disclosure via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-92

CWE-119

Related Identifiers

CVE-2022-27879

Affected Products

Intel Processors

References · 6

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27879 · Security Note
• https://security.netapp.com/advisory/ntap-20230824-0001 · Note
• https://twitter.com/CVEnew/status/1690264426866176000 · Twitter Post
• https://twitter.com/mark_a_figueroa/status/1689876928893693952 · Twitter Post
• https://twitter.com/geekphane/status/1689874290827505664 · Twitter Post