← Vulnerability feed

Vulnerability record · CVE-2022-33972 · published 16 February 2023

CVE-2022-33972: Intel xeon gold 5315y firmware vulnerability

Intel · Xeon Gold 5315y Firmware

Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.

4.4 CVSS 3.1 Medium EPSS 0.22% · top 88.5% CWE-682 · CWE-682
4.4CVSS 3.1 base score
0.22%EPSS exploitation probability, 30 days
NoNot in CISA KEV
53Affected product versions listed by NVD
3References
17 Jun 2026Last modified by NVD

Description

Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

53 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html Vendor Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html Vendor Advisory
https://security.netapp.com/advisory/ntap-20230302-0012/

Track CVE-2022-33972 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.2CVE-2021-0187Intel xeon gold 6342 firmware vulnerabilityImproper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privileg…EPSS 0.21%7.8CVE-2021-33060Intel xeon gold 5315y firmware out-of-bounds write vulnerabilityOut-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege v…EPSS 0.26%7.8CVE-2021-0159Intel xeon bronze 3204 firmware improper input validation vulnerabilityImproper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescal…EPSS 0.27%7.0CVE-2022-26837Intel xeon gold 5317 firmware improper input validation vulnerabilityImproper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege…EPSS 0.22%6.8CVE-2022-21216Intel xeon gold 5315y firmware vulnerabilityInsufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged …EPSS 0.54%6.7CVE-2022-41804Debian linux vulnerabilityUnauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable e…EPSS 0.27%6.7CVE-2022-33196Intel xeon gold 5315y firmware incorrect default permissions vulnerabilityIncorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extens…EPSS 0.21%6.7CVE-2022-32231Intel xeon gold 6138p firmware vulnerabilityImproper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege v…EPSS 0.21%

Source: NIST National Vulnerability Database (record CVE-2022-33972), CISA KEV, FIRST EPSS (scores of 2026-10-07). This page is refreshed as NVD updates the record.