CVE-2022-21180

MEDIUM

Intel Xeon E3 v5 Firmware - Authenticated Denial of Service via Improper Input Validation

Title source: llm
STIX 2.1

Description

Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.

References (3)

Core 3
Core References
Mailing List, Patch, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2022/06/16/1
Third Party Advisory x_refsource_confirm
https://security.netapp.com/advisory/ntap-20220624-0006/

Scores

CVSS v3 5.5
EPSS 0.0008
EPSS Percentile 23.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-20
Status published
Products (50)
intel/celeron_5305u_firmware
intel/celeron_g3900_firmware
intel/celeron_g3900t_firmware
intel/celeron_g3900te_firmware
intel/celeron_g3902e_firmware
intel/celeron_g3920_firmware
intel/celeron_g3920t_firmware
intel/celeron_g3930e_firmware
intel/celeron_g3930te_firmware
intel/celeron_g3940_firmware
... and 40 more
Published Jun 15, 2022
Tracked Since Feb 18, 2026