What is CVE-2022-40262?

CVE-2022-40262 is a high-severity vulnerability in Ami Aptio, classified under Write-what-where Condition. CVSS score: 8.2/10. Published 2022-09-20.

How severe is CVE-2022-40262?

High severity. CVSS v3 base score is 8.2 out of 10.

Buffer overflow in Ami Aptio

CVE-2022-40262

A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Vi…

EPSS: 0.003 (23.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Ami Aptio — versions 5.x
Ami Aptio_v — versions 5.0
Intel Server_board_m10jnp2sb
Intel Server_board_m10jnp2sb_firmware

Weakness classification (CWE)

CWE-123 — Write-what-where Condition
CWE-787 — Out-of-bounds Write

References

cret@cert.org (x_refsource_MISC, Vendor Advisory)
cret@cert.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-40262?: CVE-2022-40262 is a high-severity vulnerability in Ami Aptio, classified under Write-what-where Condition. CVSS score: 8.2/10. Published 2022-09-20.
How severe is CVE-2022-40262?: High severity. CVSS v3 base score is 8.2 out of 10.