Vulnerability-Lookup

BDU:2024-02522 (CVE-2023-32282)

Vulnerability from fstec – Published: 2024-04-03 – Updated: 2024-04-03 – View on bdu.fstec.ru Fixed

Title

Уязвимость микропрограммного обеспечения процессоров Intel, связанная с ошибками синхронизации при использовании общего ресурса, позволяющая нарушителю повысить свои привилегии

Summary

Уязвимость микропрограммного обеспечения процессоров Intel связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии

Severity

5.3 (Medium) CVSS 2.0


                      
                        AV:L/AC:H/Au:M/C:N/I:C/A:C

7.2 (High) CVSS 3.0


                      
                        CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

Class

Code vulnerability

Status

Confirmed by the vendor

Exploitation

Timing and state manipulation

Incidents

Being clarified

Remediation

Software update

CWE

CWE-367 - Ситуация гонки Time-of-check Time-of-use (TOCTOU)

Aliases

CVE-2023-32282, INTEL-SA-00929, LEN-155477

References

2 references

URL
https://support.lenovo.com/us/en/product_security/LEN-155477
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html

Impacted products

122 products from 2 vendors

Vendors

Intel Corp., Lenovo Group Limited

Products

Intel Pentium Gold Series, Intel Celeron Processor Family, 10th Generation Intel Core Processor Family, 12th Generation Intel Core Processor Family, 11th Generation Intel Core Processor Family, Intel Celeron J6413, Intel Celeron N6211, Intel Pentium J6425, Intel Pentium N6415, Intel Atom X6211E, Intel Atom X6413E, Intel Atom X6425E, Intel Atom X6212RE, Intel Atom X6414RE, Intel Atom X6425RE, Intel Atom X6427FE, Intel Atom X6200FE, Intel Core i7-11700, Intel Core i7-11700t, Intel Core i5-11400t, Intel Core i5-11500, Intel Core i5-11500t, Intel Core i5-11400, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, ThinkBook 13x G2 IAP Laptop, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, Flex 5-14ITL05 Laptop (ideapad), Flex 5-15ITL05 Laptop (ideapad), IdeaPad Flex 5 14IRU8, IdeaPad Flex 5 16IRU8, K14 G2 IRU, Lenovo Flex 7 14IRU8, ThinkBook 13s G2 ITL Laptop, ThinkBook 14 G6 IRL, ThinkBook 14s G2 ITL Laptop, Yoga 9-15IMH5 Laptop, ThinkPad L13 Gen 2 Type (20VH), ThinkPad L13 Gen 2 Type (20VJ), ThinkPad L13 Yoga Gen 2 Type (20VL), ThinkPad L13 Yoga Gen 2 Type (20VK), ThinkPad T14s Gen 4 Type (21F6), ThinkPad T14s Gen 4 Type (21F7), ThinkPad S2 Gen 6 Type 20VM China Only, ThinkPad S2 Yoga Gen 6 Type 20VN China Only, ThinkPad X1 Carbon 7th Gen Type (20QD), ThinkPad X1 Carbon 7th Gen Type (20QE), ThinkPad X1 Carbon 7th Gen Type (20R1), ThinkPad X1 Carbon 7th Gen Type (20R2), ThinkPad X1 Carbon 9th Gen Type (20XW), ThinkPad X1 Carbon 9th Gen Type (20XX), ThinkPad X1 Nano Gen 1 Type (20UN), ThinkPad X1 Nano Gen 1 Type (20UQ), ThinkPad X1 Titanium Type (20QA), ThinkPad X1 Titanium Type (20QB), ThinkPad X1 Yoga 4th Gen Type (20QF), ThinkPad X1 Yoga 4th Gen Type (20QG), ThinkPad X1 Yoga 4th Gen Type (20SA), ThinkPad X1 Yoga 4th Gen Type (20SB), ThinkPad X1 Yoga 6th Gen Type (20XY), ThinkPad X1 Yoga 6th Gen Type (20Y0), ThinkPad X13 Yoga Gen 2 Type (20W8), ThinkPad X13 Yoga Gen 2 Type (20W9), ThinkSystem ST50, ThinkSystem ST58

Versions

- (Intel Pentium Gold Series), - (Intel Celeron Processor Family), - (10th Generation Intel Core Processor Family), - (12th Generation Intel Core Processor Family), - (11th Generation Intel Core Processor Family), - (Intel Celeron J6413), - (Intel Celeron N6211), - (Intel Pentium J6425), - (Intel Pentium N6415), - (Intel Atom X6211E), - (Intel Atom X6413E), - (Intel Atom X6425E), - (Intel Atom X6212RE), - (Intel Atom X6414RE), - (Intel Atom X6425RE), - (Intel Atom X6427FE), - (Intel Atom X6200FE), - (Intel Core i7-11700), - (Intel Core i7-11700t), - (Intel Core i5-11400t), - (Intel Core i5-11500), - (Intel Core i5-11500t), - (Intel Core i5-11400), до M2VKT23A (IdeaCentre 3-07IMB05), до M42KT4AA (IdeaCentre 5 14IAB7), до M4UKT3DA (IdeaCentre 5 14IRB8), до M42KT4AA (IdeaCentre Gaming 5 17IAB7), до O5TKT34A (Legion T5 26IRB8), до O5UKT37A (Legion T7 34IRZ8), до M4UKT3DA (LOQ 17IRB8), до M2VKT23A (ThinkCentre M70c), до M3JKT3DA (ThinkCentre M70q Gen 2), до M2RKT58A (ThinkCentre M90a), до M3LKT2BA (ThinkCentre M90a Gen 2), до M4IKT21A (ThinkCentre M90a Gen 3), до M4HKT22A (ThinkCentre M90a Gen 3 Pro), до M3JKT3DA (ThinkCentre M90q Gen 2), до M42KT4AA (ThinkCentre Neo 50t Gen 3), до M36KT33A (Lenovo V50a-22IMB), до M36KT33A (Lenovo V50a-24IMB), до M2VKT23A (Lenovo V50s-07IMB), до M4PKT17A (Lenovo V50t-13IMH), до L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), до L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), до 1.21 (ThinkPad L13 Gen 3 Type (21B3)), до 1.21 (ThinkPad L13 Gen 3 Type (21B4)), до 1.21 (ThinkPad L13 Gen 3 Type (21B5)), до 1.21 (ThinkPad L13 Gen 3 Type (21B6)), до 1.34 (ThinkPad L14 Gen 3 Type (21C1)), до 1.34 (ThinkPad L14 Gen 3 Type (21C2)), до 1.34 (ThinkPad L15 Gen 3 Type (21C3)), до 1.34 (ThinkPad L15 Gen 3 Type (21C4)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), до 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), до 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), до 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), до M3JKT3DA (ThinkStation P350 Tiny Workstation), до TOE112B (ThinkSystem ST50 V2), до TOE112B (ThinkSystem ST58 V2), до HTCN39WW (IdeaPad 1-14IJL7 Laptop), до HTCN39WW (IdeaPad 1-15IJL7 Laptop), до KUCN33WW (IdeaPad Slim 3 14IAN8), до KUCN33WW (IdeaPad Slim 3 15IAN8), до K1CN45WW (Legion 7 16IAX7), до HTCN39WW (Lenovo V14 G2 IJL), до HTCN39WW (Lenovo V15 G2 IJL Laptop), до KUCN33WW (Lenovo V15 G4 IAN), до O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), до O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), до L2CN32WW (100w Gen 4 Laptop (Lenovo)), до J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), до J7CN46WW (IdeaPad Flex 5 16IAU7), до MHCH40WW (Legion 9 16IRX8), до J7CN46WW (Lenovo Flex 7 14IAU7), до HXCN56WW (ThinkBook 13x G2 IAP Laptop), до 1.22 (ThinkPad P1 Gen 5 Type (21DC)), до 1.22 (ThinkPad P1 Gen 5 Type (21DD)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), до 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), до 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), до O5RKT22A (IdeaCentre AIO 5 24IAH7), до O5RKT22A (IdeaCentre AIO 5 27IAH7), до M4UKT3DA (ThinkCentre Neo 50a 24 Gen 4 Desktop), до FXCN47WW (Flex 5-14ITL05 Laptop (ideapad)), до FXCN47WW (Flex 5-15ITL05 Laptop (ideapad)), до L6CN23WW (IdeaPad Flex 5 14IRU8), до L6CN23WW (IdeaPad Flex 5 16IRU8), до MMCN34WW (K14 G2 IRU), до L6CN23WW (Lenovo Flex 7 14IRU8), до F9CN59WW (ThinkBook 13s G2 ITL Laptop), до MMCN34WW (ThinkBook 14 G6 IRL), до F9CN59WW (ThinkBook 14s G2 ITL Laptop), до EPCN34WW (Yoga 9-15IMH5 Laptop), до 1.30 (ThinkPad L13 Gen 2 Type (20VH)), до 1.30 (ThinkPad L13 Gen 2 Type (20VJ)), до 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VL)), до 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VK)), до N3PUJ06W (ThinkPad T14s Gen 4 Type (21F6)), до N3PUJ06W (ThinkPad T14s Gen 4 Type (21F7)), до 1.30 (ThinkPad S2 Gen 6 Type 20VM China Only), до 1.30 (ThinkPad S2 Yoga Gen 6 Type 20VN China Only), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QD)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QE)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R1)), до 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R2)), до 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XW)), до 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XX)), до 1.60 (ThinkPad X1 Nano Gen 1 Type (20UN)), до 1.60 (ThinkPad X1 Nano Gen 1 Type (20UQ)), до 1.30 (ThinkPad X1 Titanium Type (20QA)), до 1.30 (ThinkPad X1 Titanium Type (20QB)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QF)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QG)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SA)), до 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SB)), до 1.66 (ThinkPad X1 Yoga 6th Gen Type (20XY)), до 1.66 (ThinkPad X1 Yoga 6th Gen Type (20Y0)), до 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W8)), до 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W9)), до ITE133A (ThinkSystem ST50), до ITE133A (ThinkSystem ST58)

Product types

Firmware, Appliance software, Микропрограммный код аппаратных компонентов компьютера

Mitigations

Использование рекомендаций: Для продуктов Lenovo: https://support.lenovo.com/us/en/product_security/LEN-155477 Для продуктов Intel: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html

JSON

To clipboard

{
  "CVSS 2.0": "AV:L/AC:H/Au:M/C:N/I:C/A:C",
  "CVSS 3.0": "AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H",
  "CVSS 4.0": null,
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Intel Corp., Lenovo Group Limited",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "- (Intel Pentium Gold Series), - (Intel Celeron Processor Family), - (10th Generation Intel Core Processor Family), - (12th Generation Intel Core Processor Family), - (11th Generation Intel Core Processor Family), - (Intel Celeron J6413), - (Intel Celeron N6211), - (Intel Pentium J6425), - (Intel Pentium N6415), - (Intel Atom X6211E), - (Intel Atom X6413E), - (Intel Atom X6425E), - (Intel Atom X6212RE), - (Intel Atom X6414RE), - (Intel Atom X6425RE), - (Intel Atom X6427FE), - (Intel Atom X6200FE), - (Intel Core i7-11700), - (Intel Core i7-11700t), - (Intel Core i5-11400t), - (Intel Core i5-11500), - (Intel Core i5-11500t), - (Intel Core i5-11400), \u0434\u043e M2VKT23A (IdeaCentre 3-07IMB05), \u0434\u043e M42KT4AA (IdeaCentre 5 14IAB7), \u0434\u043e M4UKT3DA (IdeaCentre 5 14IRB8), \u0434\u043e M42KT4AA (IdeaCentre Gaming 5 17IAB7), \u0434\u043e O5TKT34A (Legion T5 26IRB8), \u0434\u043e O5UKT37A (Legion T7 34IRZ8), \u0434\u043e M4UKT3DA (LOQ 17IRB8), \u0434\u043e M2VKT23A (ThinkCentre M70c), \u0434\u043e M3JKT3DA (ThinkCentre M70q Gen 2), \u0434\u043e M2RKT58A (ThinkCentre M90a), \u0434\u043e M3LKT2BA (ThinkCentre M90a Gen 2), \u0434\u043e M4IKT21A (ThinkCentre M90a Gen 3), \u0434\u043e M4HKT22A (ThinkCentre M90a Gen 3 Pro), \u0434\u043e M3JKT3DA (ThinkCentre M90q Gen 2), \u0434\u043e M42KT4AA (ThinkCentre Neo 50t Gen 3), \u0434\u043e M36KT33A (Lenovo V50a-22IMB), \u0434\u043e M36KT33A (Lenovo V50a-24IMB), \u0434\u043e M2VKT23A (Lenovo V50s-07IMB), \u0434\u043e M4PKT17A (Lenovo V50t-13IMH), \u0434\u043e L2CN32WW (300w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e L2CN32WW (500w Yoga Gen 4 Laptop (Lenovo)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B3)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B4)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B5)), \u0434\u043e 1.21 (ThinkPad L13 Gen 3 Type (21B6)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C1)), \u0434\u043e 1.34 (ThinkPad L14 Gen 3 Type (21C2)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C3)), \u0434\u043e 1.34 (ThinkPad L15 Gen 3 Type (21C4)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CB)), \u0434\u043e 1.44 (ThinkPad X1 Carbon 10th Gen Type (21CC)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CD)), \u0434\u043e 1.44 (ThinkPad X1 Yoga 7th Gen Type (21CE)), \u0434\u043e 1.17 (ThinkPad X13 Yoga Gen 3 Type (21AX)), \u0434\u043e M3JKT3DA (ThinkStation P350 Tiny Workstation), \u0434\u043e TOE112B (ThinkSystem ST50 V2), \u0434\u043e TOE112B (ThinkSystem ST58 V2), \u0434\u043e HTCN39WW (IdeaPad 1-14IJL7 Laptop), \u0434\u043e HTCN39WW (IdeaPad 1-15IJL7 Laptop), \u0434\u043e KUCN33WW (IdeaPad Slim 3 14IAN8), \u0434\u043e KUCN33WW (IdeaPad Slim 3 15IAN8), \u0434\u043e K1CN45WW (Legion 7 16IAX7), \u0434\u043e HTCN39WW (Lenovo V14 G2 IJL), \u0434\u043e HTCN39WW (Lenovo V15 G2 IJL Laptop), \u0434\u043e KUCN33WW (Lenovo V15 G4 IAN), \u0434\u043e O5RKT22A (ThinkCentre Neo 50a 24 Gen 3 Desktop), \u0434\u043e O5XKT21A (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e L2CN32WW (100w Gen 4 Laptop (Lenovo)), \u0434\u043e J7CN46WW (IdeaPad Flex 5 14IAU7 Laptop), \u0434\u043e J7CN46WW (IdeaPad Flex 5 16IAU7), \u0434\u043e MHCH40WW (Legion 9 16IRX8), \u0434\u043e J7CN46WW (Lenovo Flex 7 14IAU7), \u0434\u043e HXCN56WW (ThinkBook 13x G2 IAP Laptop), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DC)), \u0434\u043e 1.22 (ThinkPad P1 Gen 5 Type (21DD)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DE)), \u0434\u043e 1.22 (ThinkPad X1 Extreme Gen 5 Type (21DF)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E8)), \u0434\u043e 1.25 (ThinkPad X1 Nano Gen 2 Type (21E9)), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 24IAH7), \u0434\u043e O5RKT22A (IdeaCentre AIO 5 27IAH7), \u0434\u043e M4UKT3DA (ThinkCentre Neo 50a 24 Gen 4 Desktop), \u0434\u043e FXCN47WW (Flex 5-14ITL05 Laptop (ideapad)), \u0434\u043e FXCN47WW (Flex 5-15ITL05 Laptop (ideapad)), \u0434\u043e L6CN23WW (IdeaPad Flex 5 14IRU8), \u0434\u043e L6CN23WW (IdeaPad Flex 5 16IRU8), \u0434\u043e MMCN34WW (K14 G2 IRU), \u0434\u043e L6CN23WW (Lenovo Flex 7 14IRU8), \u0434\u043e F9CN59WW (ThinkBook 13s G2 ITL Laptop), \u0434\u043e MMCN34WW (ThinkBook 14 G6 IRL), \u0434\u043e F9CN59WW (ThinkBook 14s G2 ITL Laptop), \u0434\u043e EPCN34WW (Yoga 9-15IMH5 Laptop), \u0434\u043e 1.30 (ThinkPad L13 Gen 2 Type (20VH)), \u0434\u043e 1.30 (ThinkPad L13 Gen 2 Type (20VJ)), \u0434\u043e 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VL)), \u0434\u043e 1.30 (ThinkPad L13 Yoga Gen 2 Type (20VK)), \u0434\u043e N3PUJ06W (ThinkPad T14s Gen 4 Type (21F6)), \u0434\u043e N3PUJ06W (ThinkPad T14s Gen 4 Type (21F7)), \u0434\u043e 1.30 (ThinkPad S2 Gen 6 Type 20VM China Only), \u0434\u043e 1.30 (ThinkPad S2 Yoga Gen 6 Type 20VN China Only), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QD)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20QE)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R1)), \u0434\u043e 1.48 (ThinkPad X1 Carbon 7th Gen Type (20R2)), \u0434\u043e 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XW)), \u0434\u043e 1.66 (ThinkPad X1 Carbon 9th Gen Type (20XX)), \u0434\u043e 1.60 (ThinkPad X1 Nano Gen 1 Type (20UN)), \u0434\u043e 1.60 (ThinkPad X1 Nano Gen 1 Type (20UQ)), \u0434\u043e 1.30 (ThinkPad X1 Titanium Type (20QA)), \u0434\u043e 1.30 (ThinkPad X1 Titanium Type (20QB)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QF)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20QG)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SA)), \u0434\u043e 1.48 (ThinkPad X1 Yoga 4th Gen Type (20SB)), \u0434\u043e 1.66 (ThinkPad X1 Yoga 6th Gen Type (20XY)), \u0434\u043e 1.66 (ThinkPad X1 Yoga 6th Gen Type (20Y0)), \u0434\u043e 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W8)), \u0434\u043e 1.45 (ThinkPad X13 Yoga Gen 2 Type (20W9)), \u0434\u043e ITE133A (ThinkSystem ST50), \u0434\u043e ITE133A (ThinkSystem ST58)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Lenovo:\nhttps://support.lenovo.com/us/en/product_security/LEN-155477\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Intel:\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "14.03.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "03.04.2024",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "03.04.2024",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2024-02522",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2023-32282, INTEL-SA-00929, LEN-155477",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043e\u0434\u0430",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Intel Pentium Gold Series, Intel Celeron Processor Family, 10th Generation Intel Core Processor Family, 12th Generation Intel Core Processor Family, 11th Generation Intel Core Processor Family, Intel Celeron J6413, Intel Celeron N6211, Intel Pentium J6425, Intel Pentium N6415, Intel Atom X6211E, Intel Atom X6413E, Intel Atom X6425E, Intel Atom X6212RE, Intel Atom X6414RE, Intel Atom X6425RE, Intel Atom X6427FE, Intel Atom X6200FE, Intel Core i7-11700, Intel Core i7-11700t, Intel Core i5-11400t, Intel Core i5-11500, Intel Core i5-11500t, Intel Core i5-11400, IdeaCentre 3-07IMB05, IdeaCentre 5 14IAB7, IdeaCentre 5 14IRB8, IdeaCentre Gaming 5 17IAB7, Legion T5 26IRB8, Legion T7 34IRZ8, LOQ 17IRB8, ThinkCentre M70c, ThinkCentre M70q Gen 2, ThinkCentre M90a, ThinkCentre M90a Gen 2, ThinkCentre M90a Gen 3, ThinkCentre M90a Gen 3 Pro, ThinkCentre M90q Gen 2, ThinkCentre Neo 50t Gen 3, Lenovo V50a-22IMB, Lenovo V50a-24IMB, Lenovo V50s-07IMB, Lenovo V50t-13IMH, 300w Yoga Gen 4 Laptop (Lenovo), 500w Yoga Gen 4 Laptop (Lenovo), ThinkPad L13 Gen 3 Type (21B3), ThinkPad L13 Gen 3 Type (21B4), ThinkPad L13 Gen 3 Type (21B5), ThinkPad L13 Gen 3 Type (21B6), ThinkPad L14 Gen 3 Type (21C1), ThinkPad L14 Gen 3 Type (21C2), ThinkPad L15 Gen 3 Type (21C3), ThinkPad L15 Gen 3 Type (21C4), ThinkPad X1 Carbon 10th Gen Type (21CB), ThinkPad X1 Carbon 10th Gen Type (21CC), ThinkPad X1 Yoga 7th Gen Type (21CD), ThinkPad X1 Yoga 7th Gen Type (21CE), ThinkPad X13 Yoga Gen 3 Type (21AX), ThinkStation P350 Tiny Workstation, ThinkSystem ST50 V2, ThinkSystem ST58 V2, IdeaPad 1-14IJL7 Laptop, IdeaPad 1-15IJL7 Laptop, IdeaPad Slim 3 14IAN8, IdeaPad Slim 3 15IAN8, Legion 7 16IAX7, Lenovo V14 G2 IJL, Lenovo V15 G2 IJL Laptop, Lenovo V15 G4 IAN, ThinkCentre Neo 50a 24 Gen 3 Desktop, ThinkCentre Neo 50a 24 Gen 4 Desktop, 100w Gen 4 Laptop (Lenovo), IdeaPad Flex 5 14IAU7 Laptop, IdeaPad Flex 5 16IAU7, Legion 9 16IRX8, Lenovo Flex 7 14IAU7, ThinkBook 13x G2 IAP Laptop, ThinkPad P1 Gen 5 Type (21DC), ThinkPad P1 Gen 5 Type (21DD), ThinkPad X1 Extreme Gen 5 Type (21DE), ThinkPad X1 Extreme Gen 5 Type (21DF), ThinkPad X1 Nano Gen 2 Type (21E8), ThinkPad X1 Nano Gen 2 Type (21E9), IdeaCentre AIO 5 24IAH7, IdeaCentre AIO 5 27IAH7, Flex 5-14ITL05 Laptop (ideapad), Flex 5-15ITL05 Laptop (ideapad), IdeaPad Flex 5 14IRU8, IdeaPad Flex 5 16IRU8, K14 G2 IRU, Lenovo Flex 7 14IRU8, ThinkBook 13s G2 ITL Laptop, ThinkBook 14 G6 IRL, ThinkBook 14s G2 ITL Laptop, Yoga 9-15IMH5 Laptop, ThinkPad L13 Gen 2 Type (20VH), ThinkPad L13 Gen 2 Type (20VJ), ThinkPad L13 Yoga Gen 2 Type (20VL), ThinkPad L13 Yoga Gen 2 Type (20VK), ThinkPad T14s Gen 4 Type (21F6), ThinkPad T14s Gen 4 Type (21F7), ThinkPad S2 Gen 6 Type 20VM China Only, ThinkPad S2 Yoga Gen 6 Type 20VN China Only, ThinkPad X1 Carbon 7th Gen Type (20QD), ThinkPad X1 Carbon 7th Gen Type (20QE), ThinkPad X1 Carbon 7th Gen Type (20R1), ThinkPad X1 Carbon 7th Gen Type (20R2), ThinkPad X1 Carbon 9th Gen Type (20XW), ThinkPad X1 Carbon 9th Gen Type (20XX), ThinkPad X1 Nano Gen 1 Type (20UN), ThinkPad X1 Nano Gen 1 Type (20UQ), ThinkPad X1 Titanium Type (20QA), ThinkPad X1 Titanium Type (20QB), ThinkPad X1 Yoga 4th Gen Type (20QF), ThinkPad X1 Yoga 4th Gen Type (20QG), ThinkPad X1 Yoga 4th Gen Type (20SA), ThinkPad X1 Yoga 4th Gen Type (20SB), ThinkPad X1 Yoga 6th Gen Type (20XY), ThinkPad X1 Yoga 6th Gen Type (20Y0), ThinkPad X13 Yoga Gen 2 Type (20W8), ThinkPad X13 Yoga Gen 2 Type (20W9), ThinkSystem ST50, ThinkSystem ST58",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": null,
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0433\u043e\u043d\u043a\u0438 Time-of-check Time-of-use (TOCTOU) (CWE-367)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0433\u043e \u0440\u0435\u0441\u0443\u0440\u0441\u0430. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u041c\u0430\u043d\u0438\u043f\u0443\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0440\u043e\u043a\u0430\u043c\u0438 \u0438 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435\u043c",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://support.lenovo.com/us/en/product_security/LEN-155477\nhttps://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434, \u041f\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430, \u041c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-367",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0421\u0440\u0435\u0434\u043d\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 5,3)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,2)"
}

CVE-2023-32282 (GCVE-0-2023-32282)

Vulnerability from cvelistv5 – Published: 2024-03-14 16:45 – Updated: 2025-04-10 20:31

Summary

Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-03-14 18:32 UTC

CWE

escalation of privilege
CWE-367 - Time-of-check Time-of-use (TOCTOU) Race Condition

Assigner

intel mitre root

References

1 reference

URL	Tags
https://www.intel.com/content/www/us/en/security-…

Impacted products

1 product

Vendor	Product	Version
n/a	Intel(R) Processors	Affected: See references

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32282",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-03-14T18:32:50.656205Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-04-10T20:31:56.746Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:24.359Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Intel(R) Processors",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "See references"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "escalation of privilege",
              "lang": "en"
            },
            {
              "cweId": "CWE-367",
              "description": "Time-of-check Time-of-use (TOCTOU) Race Condition",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-03-14T16:45:47.270Z",
        "orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
        "shortName": "intel"
      },
      "references": [
        {
          "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html",
          "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00929.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce",
    "assignerShortName": "intel",
    "cveId": "CVE-2023-32282",
    "datePublished": "2024-03-14T16:45:47.270Z",
    "dateReserved": "2023-05-11T03:00:02.597Z",
    "dateUpdated": "2025-04-10T20:31:56.746Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.