Privilege Escalation Vulnerability in Intel SPS Firmware
CVE-2022-36348

8.8HIGH

Key Information:

Vendor

Intel
Status
Intel (r) Sps Firmware
Vendor
CVE Published:
16 February 2023

What is CVE-2022-36348?

Certain versions of Intel SPS firmware contain active debug code that could allow an authenticated user to elevate privileges through local access. This vulnerability underscores the need for timely updates to firmware in order to mitigate potential risks associated with unauthorized privilege escalation.

Affected Version(s)

Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.