What’s Vulnerable › Vulnerabilities
CVE-2022-29262
- Severity: medium (CVSS 6.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2023-11-14 · updated 2026-06-17
- Weakness: CWE-92
Description
Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
Affected products
- Intel Compute Module Hns2600Bpb24 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpb Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpblc24 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpblc24R Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpblc Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpblcr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpbr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpq24 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpq24R Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpq Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpqr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bps24 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bps24R Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bps Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Hns2600Bpsr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Compute Module Liquid-Cooled Hns2600Bpbrct Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board M10Jnp2Sb Firmware: before 7.219 — fixed in 7.219
- Intel Server Board M20Ntp2Sb Firmware: before 0022.d02 — fixed in 0022.d02
- Intel(R) Server Board M70KLP: before 01.04.0022 — fixed in 01.04.0022
- Intel Server Board S2600Bpb Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board S2600Bpbr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board S2600Bpq Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board S2600Bpqr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board S2600Bps Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server Board S2600Bpsr Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server System M20Ntp1Ur304 Firmware: before 0022.d02 — fixed in 0022.d02
- Intel Server System M70Klp4S2Uhh Firmware: before 01.04.0022 — fixed in 01.04.0022
- Intel Server System Mcb2208Wfaf5 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server System Vrn2224Bpaf6 Firmware: before 02.01.0015 — fixed in 02.01.0015
- Intel Server System Vrn2224Bphy6 Firmware: before 02.01.0015 — fixed in 02.01.0015
How to fix
Upgrade to a fixed version: Intel Compute Module Hns2600Bpb24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpb Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc24R Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc Firmware 02.01.0015; Intel Compute Module Hns2600Bpblcr Firmware 02.01.0015; Intel Compute Module Hns2600Bpbr Firmware 02.01.0015; Intel Compute Module Hns2600Bpq24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpq24R Firmware 02.01.0015; Intel Compute Module Hns2600Bpq Firmware 02.01.0015; Intel Compute Module Hns2600Bpqr Firmware 02.01.0015; Intel Compute Module Hns2600Bps24 Firmware 02.01.0015. Check the vendor advisory for mitigations.
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00719.html
Get alerted when CVE-2022-29262 or the next vulnerability affects your stack