CVE-2022-21198
HighCVSS 7.9Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
Time-of-check time-of-use race condition in BIOS firmware for some Intel processors. A privileged user may exploit it to escalate privileges via local access.
Risk Assessment
Risk of privilege escalation, potentially leading to full compromise of the hardware platform.
Recommendation
Apply the BIOS update provided by the motherboard manufacturer or OEM.
Other vulnerabilities in Intel BIOS firmware
See all- CVE-2023-22329Low
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
- CVE-2021-0158Medium
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
- CVE-2021-0157Medium
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Original NVD description (English source)
Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS