CVE-2022-0005 Information disclosure in Intel(R) Processors with SGX
Physical access to JTAG interface on Intel SGX processors may allow unprivileged users to disclose sensitive information.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-0005?
CVE-2022-0005 is a low-severity vulnerability in Intel(R) Processors with SGX, published on 12 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow an unprivileged user to potentially enable information disclosure via physical access.
Weakness: CWE-319
Which versions are affected by CVE-2022-0005?
It affects 459 products.
Products include Intel Celeron G5205u Firmware, Intel Celeron G5305u Firmware, Intel Celeron G5900 Firmware, Intel Celeron G5900t Firmware, Intel Celeron G5905 Firmware, Intel Celeron G5905t Firmware and 453 more.
How do I fix CVE-2022-0005?
Apply the vendor's patch.
Is CVE-2022-0005 being exploited?
There is no known exploitation of CVE-2022-0005 in the wild and no public exploit code.
Sources
Also known as GHSA-ggwq-rh53-chpg.