Xeon Silver 4316 Firmware
Vendor:
First CVE: Nov 17, 2021 · Active for 4 years
19
Total CVEs
More Total CVEs than 95% of tracked products
6.3
Avg CVEs / Year
Higher CVE frequency than 93% of tracked products
6.5
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Xeon Silver 4316 Firmware over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 17, 2021
4 years ago
Most Recent CVE
Nov 14, 2023
987 days ago
CVE Severity & Scoring
Xeon Silver 4316 Firmware19 CVEs
68%
32%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local18 (94.7%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network1 (5.3%)
Attack Complexity
Low18 (94.7%)
High1 (5.3%)
Unknown0 (0.0%)
User Interaction
None19 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low7 (36.8%)
High12 (63.2%)
None0 (0.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-23583HIGH Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or in | Nov 14, 2023 | 7.8 | 27 | NO | NO |
CVE-2021-0187HIGH Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. | Feb 16, 2023 | 8.2 | 26 | NO | NO |
CVE-2021-33060HIGH Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access. | Aug 18, 2022 | 7.8 | 25 | NO | NO |
CVE-2022-40982MEDIUM Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to po | Aug 11, 2023 | 6.5 | 24 | NO | NO |
CVE-2021-33123HIGH Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local acce | May 12, 2022 | 7.8 | 24 | NO | NO |
CVE-2021-0186MEDIUM Improper input validation in the Intel(R) SGX SDK applications compiled for SGX2 enabled processors may allow a privileged user to potentially escalation of privilege via local acc | Nov 17, 2021 | 6.7 | 23 | NO | NO |
CVE-2022-33196MEDIUM Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileg | Feb 16, 2023 | 6.7 | 22 | NO | NO |
CVE-2022-26837HIGH Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. | Feb 16, 2023 | 7.0 | 22 | NO | NO |
CVE-2022-21216MEDIUM Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable esca | Feb 16, 2023 | 6.8 | 22 | NO | NO |
CVE-2021-33124MEDIUM Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access. | May 12, 2022 | 6.7 | 22 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Xeon Silver 4316 Firmware
Top CWEs
Versions
No cataloged versions.