Find a vulnerability

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

Related vulnerabilities

BDU:2022-03864 (CVE-2022-0004)

Vulnerability from fstec – Published: 2022-06-29 – Updated: 2022-06-29 – View on bdu.fstec.ru Fixed

Title

Уязвимость реализации технологий Boot Guard (BG) и Trusted Execution Technology (TXT) микропрограммного обеспечения процессоров Intel, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость реализации технологий Boot Guard (BG) и Trusted Execution Technology (TXT) микропрограммного обеспечения процессоров Intel связана с некорректной обработкой параметров. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

6.6 (Medium) CVSS 2.0


                      
                        AV:L/AC:L/Au:N/C:C/I:C/A:N

7.3 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Authorization bypass

Incidents

Being clarified

Remediation

Software update

CWE

CWE-233 - Неправильная обработка параметров

Aliases

CVE-2022-0004, INTEL-SA-SA-00613

References

2 references

URL
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html
https://nvd.nist.gov/vuln/detail/CVE-2022-0004

Impacted products

38 products from 1 vendor

Vendors

Intel Corp.

Products

12th Generation Intel Core Processor Family, Intel 500 series, 11th Generation Intel Core Processor Family, Intel Xeon W-1300 processor family, Intel Pentium Gold Series, Intel Celeron processor 6000 series, Intel 400 series, Intel Pentium Silver Series, Intel Celeron N Series, 10th Generation Intel Core Processor Family, Intel Core i5 L16G7, Intel Core i3 L13G4, Intel 300 series, Intel Pentium Gold processor series (G54XXU), Intel Celeron Processor 4000 Series, 8th Generation Intel Core Processors, Intel 200 series, Intel 100 series, Intel C620A series, Intel C620 series, Intel C250 series, Intel C240 series, Intel C230 series, Intel Atom processor P5000 series, Intel Xeon D processor 2000 series, Intel Atom Processor E3900 Series, Intel Pentium Processor J4000, Intel Pentium Processor N4000, Intel Celeron Processor J3000, Intel Celeron Processor N3000, Intel Pentium processor J5000, Intel Pentium processor N5000 series, Intel Celeron Processor J4000, Intel Celeron Processor N4000, Intel Atom x6000E series, Intel Pentium J Series, Intel Pentium N Series, Intel Celeron J Series

Versions

до 16.0.15 (12th Generation Intel Core Processor Family), до 15.0.40 (Intel 500 series), до 15.0.40 (11th Generation Intel Core Processor Family), до 15.0.40 (Intel Xeon W-1300 processor family), до 15.0.40 (Intel Pentium Gold Series), до 15.0.40 (Intel Celeron processor 6000 series), до 14.1.65 (Intel 400 series), до 13.50.20 (Intel Pentium Silver Series), до 13.50.20 (Intel Celeron N Series), до 13.0.60 (10th Generation Intel Core Processor Family), до 13.30.30 (Intel Core i5 L16G7), до 13.30.30 (Intel Core i3 L13G4), до 12.0.90 (Intel 300 series), до 12.0.90 (Intel Pentium Gold processor series (G54XXU)), до 12.0.90 (Intel Celeron Processor 4000 Series), до 11.8.92 (8th Generation Intel Core Processors), до 11.8.92 (Intel 200 series), до 11.8.92 (Intel 100 series), - (Intel C620A series), до 11.22.92 (Intel C620 series), до 15.0.40 (Intel C250 series), до 12.0.90 (Intel C240 series), до 11.8.92 (Intel C230 series), - (Intel Atom processor P5000 series), - (Intel Xeon D processor 2000 series), до 3.1.92 (Intel Atom Processor E3900 Series), до 3.1.92 (Intel Pentium Processor J4000), до 3.1.92 (Intel Pentium Processor N4000), до 3.1.92 (Intel Celeron Processor J3000), до 3.1.92 (Intel Celeron Processor N3000), до 4.0.45 (Intel Pentium processor J5000), до 4.0.45 (Intel Pentium processor N5000 series), до 4.0.45 (Intel Celeron Processor J4000), до 4.0.45 (Intel Celeron Processor N4000), до 15.40.20 (Intel Atom x6000E series), до 15.40.20 (Intel Pentium J Series), до 15.40.20 (Intel Pentium N Series), до 15.40.20 (Intel Celeron N Series), до 15.40.20 (Intel Celeron J Series)

Product types

Appliance software, Микропрограммный код аппаратных компонентов компьютера, Firmware

Mitigations

Использование рекомендаций: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:L/Au:N/C:C/I:C/A:N",
  "CVSS 3.0": "AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u0434\u043e 16.0.15 (12th Generation Intel Core Processor Family), \u0434\u043e 15.0.40 (Intel 500 series), \u0434\u043e 15.0.40 (11th Generation Intel Core Processor Family), \u0434\u043e 15.0.40 (Intel Xeon W-1300 processor family), \u0434\u043e 15.0.40 (Intel Pentium Gold Series), \u0434\u043e 15.0.40 (Intel Celeron processor 6000 series), \u0434\u043e 14.1.65 (Intel 400 series), \u0434\u043e 13.50.20 (Intel Pentium Silver Series), \u0434\u043e 13.50.20 (Intel Celeron N Series), \u0434\u043e 13.0.60 (10th Generation Intel Core Processor Family), \u0434\u043e 13.30.30 (Intel Core i5 L16G7), \u0434\u043e 13.30.30 (Intel Core i3 L13G4), \u0434\u043e 12.0.90 (Intel 300 series), \u0434\u043e 12.0.90 (Intel Pentium Gold processor series (G54XXU)), \u0434\u043e 12.0.90 (Intel Celeron Processor 4000 Series), \u0434\u043e 11.8.92 (8th Generation Intel Core Processors), \u0434\u043e 11.8.92 (Intel 200 series), \u0434\u043e 11.8.92 (Intel 100 series), - (Intel C620A series), \u0434\u043e 11.22.92 (Intel C620 series), \u0434\u043e 15.0.40 (Intel C250 series), \u0434\u043e 12.0.90 (Intel C240 series), \u0434\u043e 11.8.92 (Intel C230 series), - (Intel Atom processor P5000 series), - (Intel Xeon D processor 2000 series), \u0434\u043e 3.1.92 (Intel Atom Processor E3900 Series), \u0434\u043e 3.1.92 (Intel Pentium Processor J4000), \u0434\u043e 3.1.92 (Intel Pentium Processor N4000), \u0434\u043e 3.1.92 (Intel Celeron Processor J3000), \u0434\u043e 3.1.92 (Intel Celeron Processor N3000), \u0434\u043e 4.0.45 (Intel Pentium processor J5000), \u0434\u043e 4.0.45 (Intel Pentium processor N5000 series), \u0434\u043e 4.0.45 (Intel Celeron Processor J4000), \u0434\u043e 4.0.45 (Intel Celeron Processor N4000), \u0434\u043e 15.40.20 (Intel Atom x6000E series), \u0434\u043e 15.40.20 (Intel Pentium J Series), \u0434\u043e 15.40.20 (Intel Pentium N Series), \u0434\u043e 15.40.20 (Intel Celeron N Series), \u0434\u043e 15.40.20 (Intel Celeron J Series)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "10.05.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "29.06.2022",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "29.06.2022",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2022-03864",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2022-0004, INTEL-SA-SA-00613",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "12th Generation Intel Core Processor Family, Intel 500 series, 11th Generation Intel Core Processor Family, Intel Xeon W-1300 processor family, Intel Pentium Gold Series, Intel Celeron processor 6000 series, Intel 400 series, Intel Pentium Silver Series, Intel Celeron N Series, 10th Generation Intel Core Processor Family, Intel Core i5 L16G7, Intel Core i3 L13G4, Intel 300 series, Intel Pentium Gold processor series (G54XXU), Intel Celeron Processor 4000 Series, 8th Generation Intel Core Processors, Intel 200 series, Intel 100 series, Intel C620A series, Intel C620 series, Intel C250 series, Intel C240 series, Intel C230 series, Intel Atom processor P5000 series, Intel Xeon D processor 2000 series, Intel Atom Processor E3900 Series, Intel Pentium Processor J4000, Intel Pentium Processor N4000, Intel Celeron Processor J3000, Intel Celeron Processor N3000, Intel Pentium processor J5000, Intel Pentium processor N5000 series, Intel Celeron Processor J4000, Intel Celeron Processor N4000, Intel Atom x6000E series, Intel Pentium J Series, Intel Pentium N Series, Intel Celeron J Series",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Boot Guard (BG) \u0438 Trusted Execution Technology (TXT) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u041d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u0430\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0430 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 (CWE-233)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 Boot Guard (BG) \u0438 Trusted Execution Technology (TXT) \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00613.html\nhttps://nvd.nist.gov/vuln/detail/CVE-2022-0004",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-233",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 6,6)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,3)"
}