CVE-2022-29494

CVSS V2 None CVSS V3 None
Description
Improper input validation in firmware for OpenBMC in some Intel(R) platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access.
Overview
  • CVE ID
  • CVE-2022-29494
  • Assigner
  • secure@intel.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-16T21:15:11
  • Last Modified Date
  • 2023-03-13T16:31:50
Weakness Enumerations
CWE URL
NVD-CWE-noinfo http://cwe.mitre.org/data/definitions/NVD-noinfo.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:intel:openbmc:*:*:*:*:*:*:*:* 1 OR wht-1.01-61_0.72
cpe:2.3:h:intel:c621a:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:c627a:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:c629a:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5315y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5317:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5318h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5318n:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5318s:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5318y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5320:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5320h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_5320t:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6312u:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6314u:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6326:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6328h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6328hl:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6330:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6330h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6330n:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6334:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6336y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6338:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6338n:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6338t:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6342:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6346:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6348:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6348h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_gold_6354:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8351n:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8352m:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8352s:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8352v:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8352y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8353h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8354h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8356h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8358:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8358p:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8360h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8360hl:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8360y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8362:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8368:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8368q:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8376h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8376hl:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8380:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8380h:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_platinum_8380hl:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_silver_4309y:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_silver_4310:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_silver_4310t:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_silver_4314:-:*:*:*:*:*:*:* 0 OR
cpe:2.3:h:intel:xeon_silver_4316:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:intel:openbmc:*:*:*:*:*:*:*:* 1 OR egs-0.91-179
cpe:2.3:h:intel:c741:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-29494
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-29494
History
Created Old Value New Value Data Type Notes
2023-04-17 07:53:43 Added to TrackCVE
2023-04-17 07:53:45 Weakness Enumeration new