← Vulnerability feed

Vulnerability record · CVE-2022-0002 · published 11 March 2022

CVE-2022-0002: Intel atom c3308 vulnerability

Intel · Atom C3308

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

6.5 CVSS 3.1 Medium EPSS 0.45% · top 63.4%
6.5CVSS 3.1 base score, v2 2.1
0.45%EPSS exploitation probability, 30 days
NoNot in CISA KEV
150Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Affected products

150 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.openwall.com/lists/oss-security/2022/03/18/2 Mailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20220818-0004/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html Vendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory
http://www.openwall.com/lists/oss-security/2022/03/18/2 Mailing ListThird Party Advisory
https://security.netapp.com/advisory/ntap-20220818-0004/ Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00598.html Vendor Advisory
https://www.oracle.com/security-alerts/cpujul2022.html PatchThird Party Advisory

Track CVE-2022-0002 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-0091Intel atom c3308 vulnerabilityImproper access control in the firmware for some Intel(R) Processors may allow an unauthenticated user to potentially enable an escalation of privile…EPSS 0.33%7.8CVE-2021-0099Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable an escalation…EPSS 0.30%6.8CVE-2021-33150Intel atom c2308 vulnerabilityHardware allows activation of test or debug logic at runtime for some Intel(R) Trace Hub instances which may allow an unauthenticated user to potenti…EPSS 0.35%6.7CVE-2021-0115Intel atom c3308 classic buffer overflow vulnerabilityBuffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local acce…EPSS 0.33%6.7CVE-2021-0103Intel atom c3308 vulnerabilityInsufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of …EPSS 0.30%6.7CVE-2021-0107Intel atom c3308 unchecked return value vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via loc…EPSS 0.30%6.7CVE-2021-0111Intel atom c3308 null pointer dereference vulnerabilityNULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege vi…EPSS 0.30%6.7CVE-2021-0114Intel atom c3000 insecure default initialization vulnerabilityUnchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via …EPSS 0.27%

Source: NIST National Vulnerability Database (record CVE-2022-0002), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.