CVE-2022-29277 : Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbit

Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.0048 Whitley: 05.42.23.0066 Cedar Island: 05.42.11.0021 Eagle Stream: 05.44.25.0052 Greenlow/Greenlow-R(skylake/kabylake): Trunk Mehlow/Mehlow-R (CoffeeLake-S): Trunk Tatlow (RKL-S): Trunk Denverton: 05.10.12.0042 Snow Ridge: Trunk Graneville DE: 05.05.15.0038 Grangeville DE NS: 05.27.26.0023 Bakerville: 05.21.51.0026 Idaville: 05.44.27.0030 Whiskey Lake: Trunk Comet Lake-S: Trunk Tiger Lake H/UP3: 05.43.12.0052 Alder Lake: 05.44.23.0047 Gemini Lake: Not Affected Apollo Lake: Not Affected Elkhart Lake: 05.44.30.0018 AMD ROME: trunk MILAN: 05.36.10.0017 GENOA: 05.52.25.0006 Snowy Owl: Trunk R1000: 05.32.50.0018 R2000: 05.44.30.0005 V2000: Trunk V3000: 05.44.30.0007 Ryzen 5000: 05.44.30.0004 Embedded ROME: Trunk Embedded MILAN: Trunk Hygon Hygon #1/#2: 05.36.26.0016 Hygon #3: 05.44.26.0007 https://www.insyde.com/security-pledge/SA-2022060

Published 2022-11-15 22:15:11

Updated 2022-11-22 19:45:50

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2022-29277

Intel » Alder Lake Firmware
Versions before (<) 05.44.23.0047
cpe:2.3:o:intel:alder_lake_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Alder Lake » Version: N/A
Intel » Bakerville Firmware
Versions before (<) 05.21.51.0026
cpe:2.3:o:intel:bakerville_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Bakerville » Version: N/A
Intel » Cedar Island Firmware
Versions before (<) 05.42.11.0021
cpe:2.3:o:intel:cedar_island_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Cedar Island » Version: N/A
Intel » Idaville Firmware
Versions before (<) 05.43.12.0052
cpe:2.3:o:intel:idaville_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Idaville » Version: N/A
Intel » Comet Lake-s Firmware
Versions before (<) 05.43.12.0052
cpe:2.3:o:intel:comet_lake-s_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Comet Lake-s » Version: N/A
Intel » Tiger Lake H/up3 Firmware
Versions before (<) 05.43.12.0052
cpe:2.3:o:intel:tiger_lake_h\/up3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Tiger Lake H/up3 » Version: N/A
Intel » Whiskey Lake Firmware
Versions before (<) 05.43.12.0052
cpe:2.3:o:intel:whiskey_lake_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Whiskey Lake » Version: N/A
Intel » Denverton Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:denverton_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Denverton » Version: N/A
Intel » Eagle Stream Firmware
Versions before (<) 05.44.25.0052
cpe:2.3:o:intel:eagle_stream_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Eagle Stream » Version: N/A
Intel » Grangeville De Ns Firmware
Versions before (<) 05.27.26.0023
cpe:2.3:o:intel:grangeville_de_ns_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Grangeville De Ns » Version: N/A
Intel » Granville De Firmware
Versions before (<) 05.05.15.0038
cpe:2.3:o:intel:granville_de_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Granville De » Version: N/A
Intel » Greenlow Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:greenlow_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Greenlow » Version: N/A
Intel » Greenlow-r Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:greenlow-r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Greenlow-r » Version: N/A
Intel » Mehlow Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:mehlow_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Mehlow » Version: N/A
Intel » Mehlow-r Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:mehlow-r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Mehlow-r » Version: N/A
Intel » Tatlow Firmware
Versions before (<) 05.10.12.0042
cpe:2.3:o:intel:tatlow_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Tatlow » Version: N/A
Intel » Purley-r Firmware
Versions before (<) 05.21.51.0048
cpe:2.3:o:intel:purley-r_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Purley-r » Version: N/A
Intel » Whitley Firmware
Versions before (<) 05.42.23.0066
cpe:2.3:o:intel:whitley_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Whitley » Version: N/A
AMD » Ryzen 5950x Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5950x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5950x » Version: N/A
AMD » Ryzen 5800x3d Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5800x3d_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5800x3d » Version: N/A
AMD » Ryzen 5900x Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5900x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5900x » Version: N/A
AMD » Ryzen 5800x Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5800x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5800x » Version: N/A
AMD » Ryzen 5600x Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5600x_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600x » Version: N/A
AMD » Ryzen 5700g Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5700g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5700g » Version: N/A
AMD » Ryzen 5600g Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5600g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600g » Version: N/A
AMD » Ryzen 5700ge Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5700ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5700ge » Version: N/A
AMD » Ryzen 5600ge Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5600ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5600ge » Version: N/A
AMD » Ryzen 5300g Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5300g_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5300g » Version: N/A
AMD » Ryzen 5300ge Firmware
Versions before (<) 05.44.30.0004
cpe:2.3:o:amd:ryzen_5300ge_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Ryzen 5300ge » Version: N/A
AMD » Genoa Firmware
Versions before (<) 05.52.25.0006
cpe:2.3:o:amd:genoa_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Genoa » Version: N/A
AMD » Hygon 1 Firmware
Versions before (<) 05.36.26.0016
cpe:2.3:o:amd:hygon_1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Hygon 1 » Version: N/A
AMD » Hygon 2 Firmware
Versions before (<) 05.36.26.0016
cpe:2.3:o:amd:hygon_2_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Hygon 2 » Version: N/A
AMD » Hygon 3 Firmware
Versions before (<) 05.44.26.0007
cpe:2.3:o:amd:hygon_3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Hygon 3 » Version: N/A
AMD » Milan Firmware
Versions before (<) 05.36.10.0017
cpe:2.3:o:amd:milan_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Milan » Version: N/A
AMD » Milan Firmware » Embedded Edition
Versions before (<) 05.36.26.0016
cpe:2.3:o:amd:milan_firmware:*:*:*:*:embedded:*:*:*
Matching versions
When used together with: AMD » Milan » Version: N/A Embedded Edition
AMD » Rome Firmware » Embedded Edition
Versions before (<) 05.36.26.0016
cpe:2.3:o:amd:rome_firmware:*:*:*:*:embedded:*:*:*
Matching versions
When used together with: AMD » Rome » Version: N/A Embedded Edition
AMD » Rome Firmware
Versions before (<) 05.36.10.0017
cpe:2.3:o:amd:rome_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Rome » Version: N/A
AMD » Snowy Owl R1000 Firmware
Versions before (<) 05.32.50.0018
cpe:2.3:o:amd:snowy_owl_r1000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Snowy Owl R1000 » Version: N/A
AMD » Snowy Owl R2000 Firmware
Versions before (<) 05.44.30.0005
cpe:2.3:o:amd:snowy_owl_r2000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Snowy Owl R2000 » Version: N/A
AMD » Snowy Owl V2000 Firmware
Versions before (<) 05.44.30.0007
cpe:2.3:o:amd:snowy_owl_v2000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Snowy Owl V2000 » Version: N/A
AMD » Snowy Owl V3000 Firmware
Versions before (<) 05.44.30.0007
cpe:2.3:o:amd:snowy_owl_v3000_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: AMD » Snowy Owl V3000 » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2022-29277

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 12 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-29277

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
8.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	2.0	6.0	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-29277

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2022-29277

https://www.insyde.com/security-pledge/SA-2022060

Insyde Security Advisory 2022060 | Insyde Software
Vendor Advisory
https://www.insyde.com/security-pledge

Insyde's Security Pledge | Insyde Software
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-29277

Products affected by CVE-2022-29277

Exploit prediction scoring system (EPSS) score for CVE-2022-29277

CVSS scores for CVE-2022-29277

CWE ids for CVE-2022-29277

References for CVE-2022-29277