CVE-2022-2154 — Vulnetix

CVE-2022-2154 PUBLISHED

An attacker with physical access can exploit this vulnerability to execute arbitrary code during DXE phase. A malicious code installed as a result of vulnerability exploitation in DXE driver could survive across an operating system (OS) boot process and runtime This issue affects: Module name: AMITSE SHA256: 288769fcb374d9280735e259c579e2dc209491f4da43b085d6aabc2d6e6ee57d Module GUID: b1da0adf-4f77-4070-a88e-bffe1c60529a This issue affects: AMI Aptio 5.x.

EPSS 0.04% · 15.5th percentile

Risk Scores

EPSS Score

0.04%

15.5th percentile

Timeline

Sep 21, 2022 EPSS Score
Sep 24, 2022 EPSS Score
Sep 27, 2022 EPSS Score
Oct 1, 2022 EPSS Score
Oct 4, 2022 EPSS Score
Oct 7, 2022 EPSS Score
Oct 10, 2022 EPSS Score
Oct 13, 2022 EPSS Score
Oct 16, 2022 EPSS Score
Oct 20, 2022 EPSS Score
Oct 23, 2022 EPSS Score
Oct 26, 2022 EPSS Score

References

https://nvd.nist.gov/vuln/detail/CVE-2022-2154 advisory
https://www.ami.com/security-center url
https://www.binarly.io/advisories/BRLY-2022-015 url
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html url

Open in Interactive Console →