1. Home
  2. CVE Database
  3. CVE-2022-32231
HIGH · 7.5

CVE-2022-32231

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Vulnerability Description

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelXeon Gold 6138P Firmware-
IntelXeon Gold 6138P-
IntelXeon Bronze 3104 Firmware-
IntelXeon Bronze 3104-
IntelXeon Bronze 3106 Firmware-
IntelXeon Bronze 3106-
IntelXeon Gold 5115 Firmware-
IntelXeon Gold 5115-
IntelXeon Gold 5118 Firmware-
IntelXeon Gold 5118-
IntelXeon Gold 5119T Firmware-
IntelXeon Gold 5119T-
IntelXeon Gold 5120 Firmware-
IntelXeon Gold 5120-
IntelXeon Gold 5120T Firmware-
IntelXeon Gold 5120T-
IntelXeon Gold 5122 Firmware-
IntelXeon Gold 5122-
IntelXeon Gold 6126 Firmware-
IntelXeon Gold 6126-

Related Weaknesses (CWE)

CWE-665

References

FAQ

What is CVE-2022-32231?

CVE-2022-32231 is a vulnerability with a CVSS score of 7.5 (HIGH). Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

How severe is CVE-2022-32231?

CVE-2022-32231 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-32231?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Xeon Gold 6138P Firmware, Intel Xeon Gold 6138P, Intel Xeon Bronze 3104 Firmware, Intel Xeon Bronze 3104, Intel Xeon Bronze 3106 Firmware.