CVE-2022-44611

Vulnerability

An improper input validation vulnerability exists in the BIOS firmware for certain Intel(R) processors. This flaw is present in versions identified in INTEL-SA-00813 [1]. The issue requires the attacker to have privileged access to the system and be within adjacent network range to exploit the code path.

Exploitation

An attacker must have privileged user access to the target system and be positioned on the same adjacent network (e.g., within the same broadcast domain). No user interaction is required beyond gaining the initial privilege. The attacker can then leverage the improper input validation in the BIOS firmware to execute steps that lead to privilege escalation [1].

Impact

Successful exploitation allows the attacker to escalate their privileges on the affected system. The exact scope of compromise is not detailed in the public advisory, but the escalation could lead to full control of the platform's firmware or higher-level system privileges [1].

Mitigation

Intel has released firmware updates to address this vulnerability. Users should update their system BIOS/UEFI firmware to the latest version provided by their system manufacturer (OEM) as indicated in INTEL-SA-00813 [1]. No workarounds are available beyond applying the firmware patch.