CVE-2022-21216

MEDIUM6.8EPSS 0.05%

intel-microcode - security update

Published: 2/16/2023Modified: 12/3/2025

Also known as:ALPINE-CVE-2022-21216

Description

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access.

Affected packages (3)

Alpine/intel-ucodefrom 0, < 20230214-r0
Debian/intel-microcodefrom 0, < 3.20230214.1~deb11u1
Debian/intel-microcodefrom 0, < 3.20230214.1~deb10u1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.8	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References (2)

ADVISORYhttps://security.alpinelinux.org/vuln/CVE-2022-21216
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2022-21216