CVE-2022-37343

Severity: medium (CVSS 6.7 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-11 · updated 2026-06-17
Weakness: CWE-284

Description

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products

Intel Atom C3308 Firmware: all versions
Intel Atom C3336 Firmware: all versions
Intel Atom C3338 Firmware: all versions
Intel Atom C3338R Firmware: all versions
Intel Atom C3436L Firmware: all versions
Intel Atom C3508 Firmware: all versions
Intel Atom C3538 Firmware: all versions
Intel Atom C3558 Firmware: all versions
Intel Atom C3558R Firmware: all versions
Intel Atom C3708 Firmware: all versions
Intel Atom C3750 Firmware: all versions
Intel Atom C3758 Firmware: all versions
Intel Atom C3758R Firmware: all versions
Intel Atom C3808 Firmware: all versions
Intel Atom C3830 Firmware: all versions
Intel Atom C3850 Firmware: all versions
Intel Atom C3858 Firmware: all versions
Intel Atom C3950 Firmware: all versions
Intel Atom C3955 Firmware: all versions
Intel Atom C3958 Firmware: all versions
Intel Atom P5322 Firmware: all versions
Intel Atom P5332 Firmware: all versions
Intel Atom P5342 Firmware: all versions
Intel Atom P5352 Firmware: all versions
Intel Atom P5362 Firmware: all versions
Intel Atom P5721 Firmware: all versions
Intel Atom P5731 Firmware: all versions
Intel Atom P5742 Firmware: all versions
Intel Atom P5752 Firmware: all versions
Intel Atom P5931B Firmware: all versions

References

Get alerted when CVE-2022-37343 or the next vulnerability affects your stack