7.5
HIGH
CVE-2022-21216
Intel Atom and Xeon Scalable Processor OOB Management Access Control Bypass
Description

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

INFO

Published Date :

Feb. 16, 2023, 8:15 p.m.

Last Modified :

Aug. 8, 2023, 2:21 p.m.

Source :

[email protected]

Remotely Exploitable :

No

Impact Score :

5.3

Exploitability Score :

1.7
Public PoC/Exploit Available at Github

CVE-2022-21216 has a 1 public PoC/Exploit available at Github. Go to the Public Exploits tab to see the list.

Affected Products

The following products are affected by CVE-2022-21216 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Intel atom_p5362_firmware
2 Intel atom_p5352_firmware
3 Intel atom_p5342_firmware
4 Intel atom_p5332_firmware
5 Intel atom_p5322_firmware
6 Intel atom_p5931b_firmware
7 Intel atom_p5962b_firmware
8 Intel xeon_silver_4310t_firmware
9 Intel xeon_silver_4310_firmware
10 Intel xeon_silver_4314_firmware
11 Intel xeon_silver_4316_firmware
12 Intel xeon_gold_5315y_firmware
13 Intel xeon_gold_5317_firmware
14 Intel xeon_gold_5320t_firmware
15 Intel xeon_gold_5318y_firmware
16 Intel xeon_gold_6326_firmware
17 Intel xeon_gold_6336y_firmware
18 Intel xeon_gold_6338t_firmware
19 Intel xeon_gold_6330_firmware
20 Intel xeon_platinum_8380hl_firmware
21 Intel xeon_platinum_8380h_firmware
22 Intel xeon_platinum_8376hl_firmware
23 Intel xeon_platinum_8376h_firmware
24 Intel xeon_platinum_8360hl_firmware
25 Intel xeon_platinum_8360h_firmware
26 Intel xeon_platinum_8356h_firmware
27 Intel xeon_platinum_8354h_firmware
28 Intel xeon_platinum_8353h_firmware
29 Intel xeon_gold_6348h_firmware
30 Intel xeon_gold_6330h_firmware
31 Intel xeon_gold_6328hl_firmware
32 Intel xeon_gold_6328h_firmware
33 Intel xeon_gold_5320h_firmware
34 Intel xeon_gold_5318h_firmware
35 Intel xeon_gold_5318n_firmware
36 Intel xeon_gold_5318s_firmware
37 Intel xeon_gold_5320_firmware
38 Intel xeon_gold_6312u_firmware
39 Intel xeon_gold_6314u_firmware
40 Intel xeon_gold_6330n_firmware
41 Intel xeon_gold_6334_firmware
42 Intel xeon_gold_6338_firmware
43 Intel xeon_gold_6338n_firmware
44 Intel xeon_gold_6342_firmware
45 Intel xeon_gold_6346_firmware
46 Intel xeon_gold_6348_firmware
47 Intel xeon_gold_6354_firmware
48 Intel xeon_platinum_8351n_firmware
49 Intel xeon_platinum_8352m_firmware
50 Intel xeon_platinum_8352s_firmware
51 Intel xeon_platinum_8352v_firmware
52 Intel xeon_platinum_8352y_firmware
53 Intel xeon_platinum_8358_firmware
54 Intel xeon_platinum_8358p_firmware
55 Intel xeon_platinum_8360y_firmware
56 Intel xeon_platinum_8362_firmware
57 Intel xeon_platinum_8368_firmware
58 Intel xeon_platinum_8368q_firmware
59 Intel xeon_platinum_8380_firmware
60 Intel xeon_silver_4309y_firmware
61 Intel atom_p5921b_firmware
62 Intel atom_p5942b_firmware
63 Intel atom_c5325_firmware
64 Intel atom_c5320_firmware
65 Intel atom_c5315_firmware
66 Intel atom_c5310_firmware
: Total Affected Vendor : 1 | Products : 66
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2022-21216.

URL Resource
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20230601-0005/

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Profile Photo
AlphabugX/CVE-2022-RCE

test 反向辣鸡数据投放 CVE-2022-23305 工具 利用 教程 Exploit POC

cve-2020-

Updated: 1 year, 11 months ago
5 stars 2 fork 2 watcher
Born at : Jan. 21, 2022, 5:07 a.m. This repo has been linked 2608 different CVEs too.

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2022-21216 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2022-21216 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • CWE Remap by [email protected]

    Aug. 08, 2023

    Action Type Old Value New Value
    Changed CWE NVD-CWE-noinfo NVD-CWE-Other
  • CVE Modified by [email protected]

    Jun. 01, 2023

    Action Type Old Value New Value
    Added Reference https://security.netapp.com/advisory/ntap-20230601-0005/ [No Types Assigned]
  • Initial Analysis by [email protected]

    Feb. 28, 2023

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
    Changed Reference Type http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html No Types Assigned http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html Vendor Advisory
    Added CWE NIST NVD-CWE-noinfo
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5315y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5315y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5317_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5317:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6312u_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6312u:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6314u_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6314u:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6326_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6326:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6334_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6334:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6336y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6336y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6342_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6342:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6346_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6346:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6348_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6348:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6354_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6354:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8351n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8351n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352m_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352m:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352v_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352v:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8358_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8358:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8358p_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8358p:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8362_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8362:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8368q_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8368q:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4309y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4309y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4310_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4310:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4310t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4310t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4314_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4314:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4316_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4316:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8356h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8356h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6328h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6328h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6328hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6328hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6348h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6348h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8353h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8353h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8354h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8354h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8376h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8376h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8376hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8376hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5962b_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5962b:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5942b_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5942b:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5931b_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5931b:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5921b_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5921b:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5362_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5362:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5352_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5352:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5342_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5342:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5332_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5332:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_p5322_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_p5322:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_c5325_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_c5325:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_c5320_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_c5320:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_c5315_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_c5315:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:atom_c5310_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:atom_c5310:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-21216 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-21216 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.13240

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
: