6.1
MEDIUM
CVE-2022-33972
Intel Xeon Scalable Processor Information Disclosure Vulnerability
Description

Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.

INFO

Published Date :

Feb. 16, 2023, 9:15 p.m.

Last Modified :

March 6, 2023, 7:43 p.m.

Remotely Exploitable :

No

Impact Score :

4.7

Exploitability Score :

0.8
Affected Products

The following products are affected by CVE-2022-33972 vulnerability. Even if cvefeed.io is aware of the exact versions of the products that are affected, the information is not represented in the table below.

ID Vendor Product Action
1 Intel xeon_silver_4310t_firmware
2 Intel xeon_silver_4310_firmware
3 Intel xeon_silver_4314_firmware
4 Intel xeon_silver_4316_firmware
5 Intel xeon_gold_5315y_firmware
6 Intel xeon_gold_5317_firmware
7 Intel xeon_gold_5320t_firmware
8 Intel xeon_gold_5318y_firmware
9 Intel xeon_gold_6326_firmware
10 Intel xeon_gold_6336y_firmware
11 Intel xeon_gold_6338t_firmware
12 Intel xeon_gold_6330_firmware
13 Intel xeon_platinum_8380hl_firmware
14 Intel xeon_platinum_8380h_firmware
15 Intel xeon_platinum_8376hl_firmware
16 Intel xeon_platinum_8376h_firmware
17 Intel xeon_platinum_8360hl_firmware
18 Intel xeon_platinum_8360h_firmware
19 Intel xeon_platinum_8356h_firmware
20 Intel xeon_platinum_8354h_firmware
21 Intel xeon_platinum_8353h_firmware
22 Intel xeon_gold_6348h_firmware
23 Intel xeon_gold_6330h_firmware
24 Intel xeon_gold_6328hl_firmware
25 Intel xeon_gold_6328h_firmware
26 Intel xeon_gold_5320h_firmware
27 Intel xeon_gold_5318h_firmware
28 Intel xeon_gold_5318n_firmware
29 Intel xeon_gold_5318s_firmware
30 Intel xeon_gold_5320_firmware
31 Intel xeon_gold_6312u_firmware
32 Intel xeon_gold_6314u_firmware
33 Intel xeon_gold_6330n_firmware
34 Intel xeon_gold_6334_firmware
35 Intel xeon_gold_6338_firmware
36 Intel xeon_gold_6338n_firmware
37 Intel xeon_gold_6342_firmware
38 Intel xeon_gold_6346_firmware
39 Intel xeon_gold_6348_firmware
40 Intel xeon_gold_6354_firmware
41 Intel xeon_platinum_8351n_firmware
42 Intel xeon_platinum_8352m_firmware
43 Intel xeon_platinum_8352s_firmware
44 Intel xeon_platinum_8352v_firmware
45 Intel xeon_platinum_8352y_firmware
46 Intel xeon_platinum_8358_firmware
47 Intel xeon_platinum_8358p_firmware
48 Intel xeon_platinum_8360y_firmware
49 Intel xeon_platinum_8362_firmware
50 Intel xeon_platinum_8368_firmware
51 Intel xeon_platinum_8368q_firmware
52 Intel xeon_platinum_8380_firmware
53 Intel xeon_silver_4309y_firmware
References to Advisories, Solutions, and Tools

Here, you will find a curated list of external links that provide in-depth information, practical solutions, and valuable tools related to CVE-2022-33972.

URL Resource
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html Vendor Advisory

We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).

Results are limited to the first 15 repositories due to potential performance issues.

The following list is the news that have been mention CVE-2022-33972 vulnerability anywhere in the article.

The following table lists the changes that have been made to the CVE-2022-33972 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.

  • CVE Modified by [email protected]

    May. 14, 2024

    Action Type Old Value New Value
  • Initial Analysis by [email protected]

    Mar. 06, 2023

    Action Type Old Value New Value
    Added CVSS V3.1 NIST AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
    Changed Reference Type http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html No Types Assigned http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html Vendor Advisory
    Added CWE NIST CWE-682
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5315y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5315y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5317_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5317:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6312u_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6312u:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6314u_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6314u:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6326_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6326:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6334_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6334:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6336y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6336y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6338t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6338t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6342_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6342:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6346_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6346:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6348_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6348:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6354_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6354:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8351n_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8351n:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352m_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352m:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352s_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352s:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352v_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352v:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8352y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8352y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8358_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8358:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8358p_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8358p:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8362_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8362:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8368_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8368:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8368q_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8368q:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4309y_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4309y:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4310_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4310:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4310t_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4310t:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4314_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4314:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_silver_4316_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_silver_4316:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6330h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6330h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8356h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8356h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8360hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8360hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5318h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5318h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_5320h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_5320h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6328h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6328h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6328hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6328hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_gold_6348h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_gold_6348h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8353h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8353h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8354h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8354h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8376h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8376h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8376hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8376hl:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380h_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380h:-:*:*:*:*:*:*:*
    Added CPE Configuration AND OR *cpe:2.3:o:intel:xeon_platinum_8380hl_firmware:-:*:*:*:*:*:*:* OR cpe:2.3:h:intel:xeon_platinum_8380hl:-:*:*:*:*:*:*:*
EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days. Following chart shows the EPSS score history of the vulnerability.
CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2022-33972 is associated with the following CWEs:

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2022-33972 weaknesses.

Exploit Prediction

EPSS is a daily estimate of the probability of exploitation activity being observed over the next 30 days.

0.04 }} 0.00%

score

0.13240

percentile

CVSS31 - Vulnerability Scoring System
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability