CVE-2022-33972: Medium severity intel xeon gold 5315y firmware vulnerability

Published Feb 16, 2023

Updated

Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.

Affected Software

106 affected components

Intel Xeon Gold 5315Y Firmware

Intel Xeon Gold 5315y Firmware

Intel Xeon Gold 5317 Firmware

Intel Xeon Gold 5318n Firmware

Intel Xeon Gold 5318s Firmware

Intel Xeon Gold 5318y Firmware

Intel Xeon Gold 5320

Intel Xeon Gold 5320 Firmware

Intel Xeon Gold 5320t Firmware

Intel Xeon Gold 6312U Firmware

Intel Xeon Gold 6314u Firmware

Intel Xeon Gold 6326 Firmware

Intel Xeon Gold 6330H Firmware

Intel Xeon Gold 6330 Firmware

Intel Xeon Gold 6330n Firmware

Intel Xeon Gold 6334 Firmware

Intel Xeon Gold 6336Y

Intel Xeon Gold 6338

Intel Xeon Gold 6338N

Intel Xeon Gold 6338n Firmware

Intel Xeon Gold 6338t

Intel Xeon Gold 6338T

Intel Xeon Gold 6342 Firmware

Intel Xeon Gold 6346

Intel Xeon Gold 6346 Firmware

Intel Xeon Gold 6348

Intel Xeon Gold 6348 Firmware

Intel Xeon Gold 6354 Firmware

Intel Xeon Platinum 8351n

Intel Xeon Platinum 8352M Firmware

Intel Xeon Platinum 8352M

Intel Xeon Platinum 8352s

Intel Xeon Platinum 8352S

Intel Xeon Platinum 8352v

Intel Xeon Platinum 8352Y Firmware

Intel Xeon Platinum 8352y Firmware

Intel Xeon Platinum 8358P

Intel Xeon Platinum 8358

Intel Xeon Platinum 8358P

Intel Xeon Platinum Processors

Intel Xeon Platinum 8360Y Firmware

Intel Xeon Platinum 8360Y

Intel Xeon Platinum 8362 Firmware

Intel Xeon Platinum Processors

Intel Xeon Platinum 8368 Firmware

Intel Xeon Platinum 8368

Intel Xeon Platinum 8368q Firmware

Intel Xeon Platinum 8380 Firmware

Intel Xeon Platinum 8380

Intel Xeon Silver 4309Y Firmware

Intel Xeon Silver 4309Y

Intel Xeon Silver 4310 Firmware

Intel Xeon Silver 4310

Intel Xeon Silver 4310t Firmware

Intel Xeon Silver 4314 Firmware

Intel Xeon Silver 4316

Intel Xeon Gold 6330H Firmware

Intel Xeon Platinum 8356h Firmware

Intel Xeon Platinum 8360H Firmware

Intel Xeon Platinum 8360h Firmware

Intel Xeon Platinum 8360HL Firmware

Intel Xeon Platinum 8360HL

Intel Xeon Gold 5318h Firmware

Intel Xeon Gold 5320H Firmware

Intel Xeon Gold 5320h Firmware

Intel Xeon Gold 6328H Firmware

Intel Xeon Gold 6328HL

Intel Xeon Gold 6348h Firmware

Intel Xeon Gold 6348H

Intel Xeon Platinum 8353H Firmware

Intel Xeon Platinum 8353h Firmware

Intel Xeon Platinum 8354h

Intel Xeon Platinum 8354H

Intel Xeon Platinum 8376H Firmware

Intel Xeon Platinum 8376hl Firmware

Intel Xeon Platinum 8380H Firmware

Intel Xeon Platinum 8380hl

Event History

Feb 16, 2023

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-33972?

CVE-2022-33972 is classified as a medium severity vulnerability due to the potential for information disclosure.

How do I fix CVE-2022-33972?

To address CVE-2022-33972, you should update the firmware of the affected Intel Xeon Scalable processors to the latest version.

What systems are affected by CVE-2022-33972?

CVE-2022-33972 affects several models of 3rd Generation Intel Xeon Scalable Processors.

Can CVE-2022-33972 be exploited remotely?

CVE-2022-33972 requires local access, so it cannot be exploited remotely.

What potential impact does CVE-2022-33972 have?

CVE-2022-33972 could lead to information disclosure, allowing a privileged user to access sensitive data.

CVE-2022-33972: Medium severity intel xeon gold 5315y firmware vulnerability

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-33972?

How do I fix CVE-2022-33972?

What systems are affected by CVE-2022-33972?

Can CVE-2022-33972 be exploited remotely?

What potential impact does CVE-2022-33972 have?

Company

Resources

Contact