What’s Vulnerable › Vulnerabilities

CVE-2022-38087

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-10 · updated 2026-06-17
• Weakness: CWE-668

Description

Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.

Affected products

• Intel Core I3-1000G1 Firmware: all versions
• Intel Core I3-1000G4 Firmware: all versions
• Intel Core I3-1005G1 Firmware: all versions
• Intel Core I3-10100 Firmware: all versions
• Intel Core I3-10100E Firmware: all versions
• Intel Core I3-10100F Firmware: all versions
• Intel Core I3-10100T Firmware: all versions
• Intel Core I3-10100Te Firmware: all versions
• Intel Core I3-10100Y Firmware: all versions
• Intel Core I3-10105 Firmware: all versions
• Intel Core I3-10105F Firmware: all versions
• Intel Core I3-10105T Firmware: all versions
• Intel Core I3-10110U Firmware: all versions
• Intel Core I3-10110Y Firmware: all versions
• Intel Core I3-10300 Firmware: all versions
• Intel Core I3-10300T Firmware: all versions
• Intel Core I3-10305 Firmware: all versions
• Intel Core I3-10305T Firmware: all versions
• Intel Core I3-10320 Firmware: all versions
• Intel Core I3-10325 Firmware: all versions
• Intel Core I3-7020U Firmware: all versions
• Intel Core I3-7100 Firmware: all versions
• Intel Core I3-7100E Firmware: all versions
• Intel Core I3-7100H Firmware: all versions
• Intel Core I3-7100T Firmware: all versions
• Intel Core I3-7100U Firmware: all versions
• Intel Core I3-7101E Firmware: all versions
• Intel Core I3-7101Te Firmware: all versions
• Intel Core I3-7102E Firmware: all versions
• Intel Core I3-7130U Firmware: all versions

References

• https://security.netapp.com/advisory/ntap-20231124-0006/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html
• https://security.netapp.com/advisory/ntap-20231124-0006/
• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html

Get alerted when CVE-2022-38087 or the next vulnerability affects your stack