CVE-2022-29493: Medium severity intel baseboard management controller firmware vulnerability
Published Feb 16, 2023
·Updated
Uncaught exception in webserver for the Integrated BMC in some Intel(R) platforms before versions 2.86, 2.09 and 2.78 may allow a privileged user to potentially enable denial of service via network access.
Affected Software
250 affected components
Intel Baseboard Management Controller firmware<2.86
Intel C621
Intel C622
Intel C624
Intel C625
Intel C626
Intel C627
Intel C628
Intel C629
Intel Xeon Bronze 3104
Intel Xeon Bronze 3106
Intel Xeon Bronze 3204
Intel Xeon Bronze 3206r
Intel Xeon Gold 5115
Intel Xeon Gold 5118
Intel Xeon Gold 5119t
Intel Xeon Gold 5120
Intel Xeon Gold 5120t
Intel Xeon Gold 5122
Intel Xeon Gold 5215
Intel Xeon Gold 5215l
Intel Xeon Gold 5217
Intel Xeon Gold 5218
Intel Xeon Gold 5218b
Intel Xeon Gold 5218n
Intel Xeon Gold 5218r
Intel Xeon Gold 5218t
Intel Xeon Gold 5220
Intel Xeon Gold 5220r
Intel Xeon Gold 5220s
Intel Xeon Gold 5220t
Intel Xeon Gold 5222
Intel Xeon Gold 6126
Intel Xeon Gold 6126f
Intel Xeon Gold 6126t
Intel Xeon Gold 6128
Intel Xeon Gold 6130
Intel Xeon Gold 6130f
Intel Xeon Gold 6130t
Intel Xeon Gold 6132
Intel Xeon Gold 6134
Intel Xeon Gold 6136
Intel Xeon Gold 6138
Intel Xeon Gold 6138f
Intel Xeon Gold 6138p
Intel Xeon Gold 6138t
Intel Xeon Gold 6140
Intel Xeon Gold 6142
Intel Xeon Gold 6142f
Intel Xeon Gold 6144
Intel Xeon Gold 6146
Intel Xeon Gold 6148
Intel Xeon Gold 6148f
Intel Xeon Gold 6150
Intel Xeon Gold 6152
Intel Xeon Gold 6154
Intel Xeon Gold 6208u
Intel Xeon Gold 6209u
Intel Xeon Gold 6210u
Intel Xeon Gold 6212u
Intel Xeon Gold 6222v
Intel Xeon Gold 6226
Intel Xeon Gold 6226r
Intel Xeon Gold 6230
Intel Xeon Gold 6230n
Intel Xeon Gold 6230r
Intel Xeon Gold 6230t
Intel Xeon Gold 6234
Intel Xeon Gold 6238
Intel Xeon Gold 6238l
Intel Xeon Gold 6238r
Intel Xeon Gold 6238t
Intel Xeon Gold 6240
Intel Xeon Gold 6240l
Intel Xeon Gold 6240r
Intel Xeon Gold 6240y
Intel Xeon Gold 6242
Intel Xeon Gold 6242r
Intel Xeon Gold 6244
Intel Xeon Gold 6246
Intel Xeon Gold 6246r
Intel Xeon Gold 6248
Intel Xeon Gold 6248r
Intel Xeon Gold 6250
Intel Xeon Gold 6250l
Intel Xeon Gold 6252
Intel Xeon Gold 6252n
Intel Xeon Gold 6254
Intel Xeon Gold 6256
Intel Xeon Gold 6258r
Intel Xeon Gold 6262v
Intel Xeon Platinum 8153
Intel Xeon Platinum 8156
Intel Xeon Platinum 8158
Intel Xeon Platinum 8160
Intel Xeon Platinum 8160f
Intel Xeon Platinum 8160t
Intel Xeon Platinum 8164
Intel Xeon Platinum 8168
Intel Xeon Platinum 8170
Intel Xeon Platinum 8176
Intel Xeon Platinum 8176f
Intel Xeon Platinum 8180
Intel Xeon Platinum 8253
Intel Xeon Platinum 8256
Intel Xeon Platinum 8260
Intel Xeon Platinum 8260l
Intel Xeon Platinum 8260y
Intel Xeon Platinum 8268
Intel Xeon Platinum 8270
Intel Xeon Platinum 8276
Intel Xeon Platinum 8276l
Intel Xeon Platinum 8280
Intel Xeon Platinum 8280l
Intel Xeon Platinum 9221
Intel Xeon Platinum 9222
Intel Xeon Platinum 9242
Intel Xeon Platinum 9282
Intel Xeon Silver 4108
Intel Xeon Silver 4109t
Intel Xeon Silver 4110
Intel Xeon Silver 4112
Intel Xeon Silver 4114
Intel Xeon Silver 4114t
Intel Xeon Silver 4116
Intel Xeon Silver 4116t
Intel Xeon Silver 4208
Intel Xeon Silver 4209t
Intel Xeon Silver 4210
Intel Xeon Silver 4210r
Intel Xeon Silver 4210t
Intel Xeon Silver 4214
Intel Xeon Silver 4214r
Intel Xeon Silver 4214y
Intel Xeon Silver 4215
Intel Xeon Silver 4215r
Intel Xeon Silver 4216
Intel Xeon W-3175x
Intel Xeon W-3223
Intel Xeon W-3225
Intel Xeon W-3235
Intel Xeon W-3245
Intel Xeon W-3245m
Intel Xeon W-3265
Intel Xeon W-3265m
Intel Xeon W-3275
Intel Xeon W-3275m
Intel Baseboard Management Controller firmware<2.09
Intel C252
Intel C256
Intel Xeon E-2124
Intel Xeon E-2124g
Intel Xeon E-2126g
Intel Xeon E-2134
Intel Xeon E-2136
Intel Xeon E-2144g
Intel Xeon E-2146g
Intel Xeon E-2174g
Intel Xeon E-2176g
Intel Xeon E-2176m
Intel Xeon E-2186g
Intel Xeon E-2186m
Intel Xeon E-2224
Intel Xeon E-2224g
Intel Xeon E-2226g
Intel Xeon E-2226ge
Intel Xeon E-2234
Intel Xeon E-2236
Intel Xeon E-2244g
Intel Xeon E-2246g
Intel Xeon E-2254me
Intel Xeon E-2254ml
Intel Xeon E-2274g
Intel Xeon E-2276g
Intel Xeon E-2276m
Intel Xeon E-2276me
Intel Xeon E-2276ml
Intel Xeon E-2278g
Intel Xeon E-2278ge
Intel Xeon E-2278gel
Intel Xeon E-2286g
Intel Xeon E-2286m
Intel Xeon E-2288g
Intel Xeon E-2314
Intel Xeon E-2324g
Intel Xeon E-2334
Intel Xeon E-2336
Intel Xeon E-2356g
Intel Xeon E-2374g
Intel Xeon E-2378
Intel Xeon E-2378g
Intel Xeon E-2386g
Intel Xeon E-2388g
Intel Baseboard Management Controller firmware<2.81
Intel C621a
Intel C627a
Intel C629a
Intel Xeon Gold 5315y
Intel Xeon Gold 5317
Intel Xeon Gold 5318h
Intel Xeon Gold 5318n
Intel Xeon Gold 5318s
Intel Xeon Gold 5318y
Intel Xeon Gold 5320
Intel Xeon Gold 5320h
Intel Xeon Gold 5320t
Intel Xeon Gold 6312u
Intel Xeon Gold 6314u
Intel Xeon Gold 6326
Intel Xeon Gold 6328h
Intel Xeon Gold 6328hl
Intel Xeon Gold 6330
Intel Xeon Gold 6330h
Intel Xeon Gold 6330n
Intel Xeon Gold 6334
Intel Xeon Gold 6336y
Intel Xeon Gold 6338
Intel Xeon Gold 6338n
Intel Xeon Gold 6338t
Intel Xeon Gold 6342
Intel Xeon Gold 6346
Intel Xeon Gold 6348
Intel Xeon Gold 6348h
Intel Xeon Gold 6354
Intel Xeon Platinum 8351n
Intel Xeon Platinum 8352m
Intel Xeon Platinum 8352s
Intel Xeon Platinum 8352v
Intel Xeon Platinum 8352y
Intel Xeon Platinum 8353h
Intel Xeon Platinum 8354h
Intel Xeon Platinum 8356h
Intel Xeon Platinum 8358
Intel Xeon Platinum 8358p
Intel Xeon Platinum 8360h
Intel Xeon Platinum 8360hl
Intel Xeon Platinum 8360y
Intel Xeon Platinum 8362
Intel Xeon Platinum 8368
Intel Xeon Platinum 8368q
Intel Xeon Platinum 8376h
Intel Xeon Platinum 8376hl
Intel Xeon Platinum 8380
Intel Xeon Platinum 8380h
Intel Xeon Platinum 8380hl
Intel Xeon Silver 4309y
Intel Xeon Silver 4310
Intel Xeon Silver 4310t
Intel Xeon Silver 4314
Intel Xeon Silver 4316
Event History
Feb 16, 2023
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-29493?
CVE-2022-29493 has been rated as a critical vulnerability due to the potential for denial of service by a privileged user via network access.
2
How do I fix CVE-2022-29493?
To mitigate CVE-2022-29493, upgrade your Intel baseboard management controller firmware to version 2.86 or later.
3
Who is affected by CVE-2022-29493?
CVE-2022-29493 affects certain Intel platforms with versions of the baseboard management controller firmware prior to 2.86, 2.09, and 2.78.
4
What types of systems are susceptible to CVE-2022-29493?
Intel systems that utilize vulnerable versions of the baseboard management controller firmware are susceptible to CVE-2022-29493.
5
Can CVE-2022-29493 be exploited remotely?
Yes, CVE-2022-29493 can potentially be exploited remotely by a privileged user through network access.