CVE-2022-26343

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-16 · updated 2026-06-17

Description

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Xeon Bronze 3104 Firmware: all versions
Intel Xeon Bronze 3106 Firmware: all versions
Intel Xeon Bronze 3204 Firmware: all versions
Intel Xeon Bronze 3206R Firmware: all versions
Intel Xeon D-1513N Firmware: all versions
Intel Xeon D-1518 Firmware: all versions
Intel Xeon D-1520 Firmware: all versions
Intel Xeon D-1521 Firmware: all versions
Intel Xeon D-1523N Firmware: all versions
Intel Xeon D-1527 Firmware: all versions
Intel Xeon D-1528 Firmware: all versions
Intel Xeon D-1529 Firmware: all versions
Intel Xeon D-1531 Firmware: all versions
Intel Xeon D-1533N Firmware: all versions
Intel Xeon D-1537 Firmware: all versions
Intel Xeon D-1539 Firmware: all versions
Intel Xeon D-1540 Firmware: all versions
Intel Xeon D-1541 Firmware: all versions
Intel Xeon D-1543N Firmware: all versions
Intel Xeon D-1548 Firmware: all versions
Intel Xeon D-1553N Firmware: all versions
Intel Xeon D-1557 Firmware: all versions
Intel Xeon D-1559 Firmware: all versions
Intel Xeon D-1567 Firmware: all versions
Intel Xeon D-1571 Firmware: all versions
Intel Xeon D-1577 Firmware: all versions
Intel Xeon D-1602 Firmware: all versions
Intel Xeon D-1622 Firmware: all versions
Intel Xeon D-1623N Firmware: all versions
Intel Xeon D-1627 Firmware: all versions

References

Get alerted when CVE-2022-26343 or the next vulnerability affects your stack