Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM…
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 82
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:genoa_firmware:*:*:*:*:*:*:*:* | before 05.52.25.0006 | Vulnerable | AMD |
| cpe:2.3:h:amd:genoa:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:hygon_1_firmware:*:*:*:*:*:*:*:* | before 05.36.26.0016 | Vulnerable | AMD |
| cpe:2.3:h:amd:hygon_1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:hygon_2_firmware:*:*:*:*:*:*:*:* | before 05.36.26.0016 | Vulnerable | AMD |
| cpe:2.3:h:amd:hygon_2:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:hygon_3_firmware:*:*:*:*:*:*:*:* | before 05.44.26.0007 | Vulnerable | AMD |
| cpe:2.3:h:amd:hygon_3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:milan_firmware:*:*:*:*:*:*:*:* | before 05.36.10.0017 | Vulnerable | AMD |
| cpe:2.3:h:amd:milan:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
- cpe:2.3:o:amd:genoa_firmware:*:*:*:*:*:*:*:* Versions before 05.52.25.0006 Vulnerable ·AMD
- cpe:2.3:h:amd:genoa:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:hygon_1_firmware:*:*:*:*:*:*:*:* Versions before 05.36.26.0016 Vulnerable ·AMD
- cpe:2.3:h:amd:hygon_1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:hygon_2_firmware:*:*:*:*:*:*:*:* Versions before 05.36.26.0016 Vulnerable ·AMD
- cpe:2.3:h:amd:hygon_2:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:hygon_3_firmware:*:*:*:*:*:*:*:* Versions before 05.44.26.0007 Vulnerable ·AMD
- cpe:2.3:h:amd:hygon_3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:milan_firmware:*:*:*:*:*:*:*:* Versions before 05.36.10.0017 Vulnerable ·AMD
- cpe:2.3:h:amd:milan:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
Show 72 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:amd:milan_firmware:*:*:*:*:embedded:*:*:* | before 05.36.26.0016 | Vulnerable | AMD |
| cpe:2.3:h:amd:milan:-:*:*:*:embedded:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:rome_firmware:*:*:*:*:*:*:*:* | before 05.36.10.0017 | Vulnerable | AMD |
| cpe:2.3:h:amd:rome:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:rome_firmware:*:*:*:*:embedded:*:*:* | before 05.36.26.0016 | Vulnerable | AMD |
| cpe:2.3:h:amd:rome:-:*:*:*:embedded:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5300g_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5300g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5300ge_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5300ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600g_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600ge_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5600x_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5600x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5700g_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5700g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5700ge_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5700ge:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5800x_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5800x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5800x3d_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5800x3d:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5900x_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5900x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:ryzen_5950x_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0004 | Vulnerable | AMD |
| cpe:2.3:h:amd:ryzen_5950x:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:snowy_owl_r1000_firmware:*:*:*:*:*:*:*:* | before 05.32.50.0018 | Vulnerable | AMD |
| cpe:2.3:h:amd:snowy_owl_r1000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:snowy_owl_r2000_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0005 | Vulnerable | AMD |
| cpe:2.3:h:amd:snowy_owl_r2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:snowy_owl_v2000_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0007 | Vulnerable | AMD |
| cpe:2.3:h:amd:snowy_owl_v2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:amd:snowy_owl_v3000_firmware:*:*:*:*:*:*:*:* | before 05.44.30.0007 | Vulnerable | AMD |
| cpe:2.3:h:amd:snowy_owl_v3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | AMD |
| cpe:2.3:o:intel:alder_lake_firmware:*:*:*:*:*:*:*:* | before 05.44.23.0047 | Vulnerable | Intel |
| cpe:2.3:h:intel:alder_lake:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:bakerville_firmware:*:*:*:*:*:*:*:* | before 05.21.51.0026 | Vulnerable | Intel |
| cpe:2.3:h:intel:bakerville:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:cedar_island_firmware:*:*:*:*:*:*:*:* | before 05.42.11.0021 | Vulnerable | Intel |
| cpe:2.3:h:intel:cedar_island:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:idaville_firmware:*:*:*:*:*:*:*:* | before 05.43.12.0052 | Vulnerable | Intel |
| cpe:2.3:h:intel:idaville:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:comet_lake-s_firmware:*:*:*:*:*:*:*:* | before 05.43.12.0052 | Vulnerable | Intel |
| cpe:2.3:h:intel:comet_lake-s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:tiger_lake_h\/up3_firmware:*:*:*:*:*:*:*:* | before 05.43.12.0052 | Vulnerable | Intel |
| cpe:2.3:h:intel:tiger_lake_h\/up3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:whiskey_lake_firmware:*:*:*:*:*:*:*:* | before 05.43.12.0052 | Vulnerable | Intel |
| cpe:2.3:h:intel:whiskey_lake:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:denverton_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:denverton:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:eagle_stream_firmware:*:*:*:*:*:*:*:* | before 05.44.25.0052 | Vulnerable | Intel |
| cpe:2.3:h:intel:eagle_stream:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:grangeville_de_ns_firmware:*:*:*:*:*:*:*:* | before 05.27.26.0023 | Vulnerable | Intel |
| cpe:2.3:h:intel:grangeville_de_ns:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:granville_de_firmware:*:*:*:*:*:*:*:* | before 05.05.15.0038 | Vulnerable | Intel |
| cpe:2.3:h:intel:granville_de:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:greenlow_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:greenlow:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:greenlow-r_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:greenlow-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:mehlow_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:mehlow:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:mehlow-r_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:mehlow-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:tatlow_firmware:*:*:*:*:*:*:*:* | before 05.10.12.0042 | Vulnerable | Intel |
| cpe:2.3:h:intel:tatlow:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:purley-r_firmware:*:*:*:*:*:*:*:* | before 05.21.51.0048 | Vulnerable | Intel |
| cpe:2.3:h:intel:purley-r:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
| cpe:2.3:o:intel:whitley_firmware:*:*:*:*:*:*:*:* | before 05.42.23.0066 | Vulnerable | Intel |
| cpe:2.3:h:intel:whitley:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Intel |
- cpe:2.3:o:amd:milan_firmware:*:*:*:*:embedded:*:*:* Versions before 05.36.26.0016 Vulnerable ·AMD
- cpe:2.3:h:amd:milan:-:*:*:*:embedded:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:rome_firmware:*:*:*:*:*:*:*:* Versions before 05.36.10.0017 Vulnerable ·AMD
- cpe:2.3:h:amd:rome:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:rome_firmware:*:*:*:*:embedded:*:*:* Versions before 05.36.26.0016 Vulnerable ·AMD
- cpe:2.3:h:amd:rome:-:*:*:*:embedded:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5300g_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5300g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5300ge_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5300ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600g_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600ge_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5600x_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5600x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5700g_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5700g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5700ge_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5700ge:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5800x_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5800x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5800x3d_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5800x3d:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5900x_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5900x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:ryzen_5950x_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0004 Vulnerable ·AMD
- cpe:2.3:h:amd:ryzen_5950x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:snowy_owl_r1000_firmware:*:*:*:*:*:*:*:* Versions before 05.32.50.0018 Vulnerable ·AMD
- cpe:2.3:h:amd:snowy_owl_r1000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:snowy_owl_r2000_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0005 Vulnerable ·AMD
- cpe:2.3:h:amd:snowy_owl_r2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:snowy_owl_v2000_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0007 Vulnerable ·AMD
- cpe:2.3:h:amd:snowy_owl_v2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:amd:snowy_owl_v3000_firmware:*:*:*:*:*:*:*:* Versions before 05.44.30.0007 Vulnerable ·AMD
- cpe:2.3:h:amd:snowy_owl_v3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·AMD
- cpe:2.3:o:intel:alder_lake_firmware:*:*:*:*:*:*:*:* Versions before 05.44.23.0047 Vulnerable ·Intel
- cpe:2.3:h:intel:alder_lake:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:bakerville_firmware:*:*:*:*:*:*:*:* Versions before 05.21.51.0026 Vulnerable ·Intel
- cpe:2.3:h:intel:bakerville:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:cedar_island_firmware:*:*:*:*:*:*:*:* Versions before 05.42.11.0021 Vulnerable ·Intel
- cpe:2.3:h:intel:cedar_island:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:idaville_firmware:*:*:*:*:*:*:*:* Versions before 05.43.12.0052 Vulnerable ·Intel
- cpe:2.3:h:intel:idaville:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:comet_lake-s_firmware:*:*:*:*:*:*:*:* Versions before 05.43.12.0052 Vulnerable ·Intel
- cpe:2.3:h:intel:comet_lake-s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:tiger_lake_h\/up3_firmware:*:*:*:*:*:*:*:* Versions before 05.43.12.0052 Vulnerable ·Intel
- cpe:2.3:h:intel:tiger_lake_h\/up3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:whiskey_lake_firmware:*:*:*:*:*:*:*:* Versions before 05.43.12.0052 Vulnerable ·Intel
- cpe:2.3:h:intel:whiskey_lake:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:denverton_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:denverton:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:eagle_stream_firmware:*:*:*:*:*:*:*:* Versions before 05.44.25.0052 Vulnerable ·Intel
- cpe:2.3:h:intel:eagle_stream:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:grangeville_de_ns_firmware:*:*:*:*:*:*:*:* Versions before 05.27.26.0023 Vulnerable ·Intel
- cpe:2.3:h:intel:grangeville_de_ns:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:granville_de_firmware:*:*:*:*:*:*:*:* Versions before 05.05.15.0038 Vulnerable ·Intel
- cpe:2.3:h:intel:granville_de:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:greenlow_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:greenlow:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:greenlow-r_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:greenlow-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:mehlow_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:mehlow:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:mehlow-r_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:mehlow-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:tatlow_firmware:*:*:*:*:*:*:*:* Versions before 05.10.12.0042 Vulnerable ·Intel
- cpe:2.3:h:intel:tatlow:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:purley-r_firmware:*:*:*:*:*:*:*:* Versions before 05.21.51.0048 Vulnerable ·Intel
- cpe:2.3:h:intel:purley-r:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
- cpe:2.3:o:intel:whitley_firmware:*:*:*:*:*:*:*:* Versions before 05.42.23.0066 Vulnerable ·Intel
- cpe:2.3:h:intel:whitley:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-29277
- 2026-10-03 Alias added: GHSA-88wh-qc3q-cp9g
References
Sources
- CVE-2022-29277 · CVE Program
- CVE-2022-29277 · NVD
- FIRST EPSS
- GHSA-88wh-qc3q-cp9g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences