CVE-2022-29510

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-11-14 · updated 2026-06-17
Weakness: CWE-92

Description

Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Compute Module Hns2600Bp Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpb24 Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpb24R Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpb Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpblc24 Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpblc24R Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpblc Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpblcr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpbr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpbrct Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpq24 Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpq24R Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpq Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpqr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bps24 Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bps24R Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bps Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Compute Module Hns2600Bpsr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board M10Jnp2Sb Firmware: before 7.219 — fixed in 7.219
Intel Server Board M20Ntp2Sb Firmware: before 0022.d02 — fixed in 0022.d02
Intel(R) Server Board M70KLP: before 01.04.0029 — fixed in 01.04.0029
Intel Server Board S2600Bpb Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board S2600Bpbr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board S2600Bpq Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board S2600Bpqr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board S2600Bps Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server Board S2600Bpsr Firmware: before 02.01.0015 — fixed in 02.01.0015
Intel Server System M20Ntp1Ur304 Firmware: before 0022.d02 — fixed in 0022.d02
Intel Server System M70Klp4S2Uhh Firmware: before 01.04.0029 — fixed in 01.04.0029

How to fix

Upgrade to a fixed version: Intel Compute Module Hns2600Bp Firmware 02.01.0015; Intel Compute Module Hns2600Bpb24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpb24R Firmware 02.01.0015; Intel Compute Module Hns2600Bpb Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc24R Firmware 02.01.0015; Intel Compute Module Hns2600Bpblc Firmware 02.01.0015; Intel Compute Module Hns2600Bpblcr Firmware 02.01.0015; Intel Compute Module Hns2600Bpbr Firmware 02.01.0015; Intel Compute Module Hns2600Bpbrct Firmware 02.01.0015; Intel Compute Module Hns2600Bpq24 Firmware 02.01.0015; Intel Compute Module Hns2600Bpq24R Firmware 02.01.0015. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2022-29510 or the next vulnerability affects your stack