CVE-2022-21216 Privilege escalation in Intel(R) Atom and Intel Xeon Scalable Processors
Privileged users can escalate privileges via adjacent network access due to insufficient access control in Intel Atom and Xeon out-of-band management.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-21216?
CVE-2022-21216 is a high-severity vulnerability in Intel(R) Atom and Intel Xeon Scalable Processors, published on 16 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.
Which versions are affected by CVE-2022-21216?
It affects 66 products.
Products include Intel Atom C5310 Firmware, Intel Atom C5315 Firmware, Intel Atom C5320 Firmware, Intel Atom C5325 Firmware, Intel Atom P5322 Firmware, Intel Atom P5332 Firmware and 60 more.
How do I fix CVE-2022-21216?
Apply the vendor's patch.
Is CVE-2022-21216 being exploited?
There is no known exploitation of CVE-2022-21216 in the wild and no public exploit code.
Sources
Also known as ALPINE-CVE-2022-21216, DEBIAN-CVE-2022-21216, GHSA-r59j-cggc-648q, UBUNTU-CVE-2022-21216.