Rewterz Threat Advisory – Multiple Intel Xeon Processors Vulnerabilities

Severity

Low

Analysis Summary

CVE-2022-21136 CVSS:3.3

Intel Xeon Processors are vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request, a local authenticated attacker could exploit this vulnerability to cause a denial of service.

CVE-2022-21131 CVSS:3.3

Intel Xeon Processors could allow a local authenticated attacker to obtain sensitive information, caused by improper access control. By sending a specially-crafted request, an attacker could exploit this vulnerability to obtain sensitive information.

Impact

• Denial of Service
• Information Disclosure

Indicators Of Compromise

CVE

CVE-2022-21136

CVE-2022-21131

Affected Vendors

Intel

Affected Products

• Intel Xeon Scalable Processor Intel 2nd Generation Intel Xeon Scalable Processors
• Intel Xeon D-2100 Processor
• Intel Core i9; 79xxX; 78xxX
• Intel Xeon Scalable Processor
• Intel 2nd Generation Intel Xeon Scalable Processors

Remediation

Refer to INTEl Security Advisory for patch, upgrade or suggested workaround information.
INTEl Security Advisory