CVE-2022-36338 — Vulnetix

Try Vulnetix Request Demo

CVE-2022-36338 PUBLISHED

BRLY-2022-017 High CVE-2022-36338 Binarly REsearch Team identified an SMM callout, which allows an attacker to access the System Management Mode and execute arbitrary code.

EPSS 0.13% · 32.8th percentile

Risk Scores

EPSS Score

0.13%

32.8th percentile

Timeline

Sep 23, 2022 CVE Published
Sep 24, 2022 EPSS Score
Nov 7, 2022 EPSS Score
Dec 21, 2022 EPSS Score
Feb 3, 2023 EPSS Score
Mar 7, 2023 EPSS Score
Mar 19, 2023 EPSS Score
May 2, 2023 EPSS Score
May 9, 2023 PoC Published
May 10, 2023 PoC Published
May 10, 2023 PoC Published
May 16, 2023 PoC Published

References

[BRLY-2022-017] SMM callout vulnerability in SMM driver (SMM arbitrary code execution). advisory

Open in Interactive Console →