CVE-2022-40262

{"containers": {"cna": {"affected": [{"product": "Aptio", "vendor": "AMI", "versions": [{"status": "affected", "version": "5.x"}]}], "credits": [{"lang": "en", "value": "Binarly efiXplorer team"}], "datePublic": "2022-08-11T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}], "problemTypes": [{"descriptions": [{"cweId": "CWE-123", "description": "CWE-123 Write-what-where Condition", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-09-20T17:35:35.000Z", "orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.ami.com/security-center/"}, {"tags": ["x_refsource_MISC"], "url": "https://www.binarly.io/advisories/BRLY-2022-009"}], "source": {"discovery": "EXTERNAL"}, "title": "The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cert@cert.org", "DATE_PUBLIC": "2022-08-11T01:03:00.000Z", "ID": "CVE-2022-40262", "STATE": "PUBLIC", "TITLE": "The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase."}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Aptio", "version": {"version_data": [{"version_name": "5.x", "version_value": "5.x"}]}}]}, "vendor_name": "AMI"}]}}, "credit": [{"lang": "eng", "value": "Binarly efiXplorer team"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-123 Write-what-where Condition"}]}]}, "references": {"reference_data": [{"name": "https://www.ami.com/security-center/", "refsource": "MISC", "url": "https://www.ami.com/security-center/"}, {"name": "https://www.binarly.io/advisories/BRLY-2022-009", "refsource": "MISC", "url": "https://www.binarly.io/advisories/BRLY-2022-009"}]}, "source": {"discovery": "EXTERNAL"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:14:40.079Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.ami.com/security-center/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.binarly.io/advisories/BRLY-2022-009"}]}, {"metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-27T18:12:31.153646Z", "id": "CVE-2022-40262", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-27T18:13:02.778Z"}}]}, "cveMetadata": {"assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "assignerShortName": "certcc", "cveId": "CVE-2022-40262", "datePublished": "2022-09-20T17:35:36.008Z", "dateReserved": "2022-09-08T00:00:00.000Z", "dateUpdated": "2025-05-27T18:13:02.778Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.ami.com/security-center/", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://www.binarly.io/advisories/BRLY-2022-009", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:14:40.079Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.2, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-40262", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-05-27T18:12:31.153646Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-27T16:00:44.866Z"}}], "cna": {"title": "The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "value": "Binarly efiXplorer team"}], "affected": [{"vendor": "AMI", "product": "Aptio", "versions": [{"status": "affected", "version": "5.x"}]}], "datePublic": "2022-08-11T00:00:00.000Z", "references": [{"url": "https://www.ami.com/security-center/", "tags": ["x_refsource_MISC"]}, {"url": "https://www.binarly.io/advisories/BRLY-2022-009", "tags": ["x_refsource_MISC"]}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "descriptions": [{"lang": "en", "value": "A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-123", "description": "CWE-123 Write-what-where Condition"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2022-09-20T17:35:35.000Z"}, "x_legacyV4Record": {"credit": [{"lang": "eng", "value": "Binarly efiXplorer team"}], "source": {"discovery": "EXTERNAL"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_name": "5.x", "version_value": "5.x"}]}, "product_name": "Aptio"}]}, "vendor_name": "AMI"}]}}, "data_type": "CVE", "generator": {"engine": "Vulnogram 0.0.9"}, "references": {"reference_data": [{"url": "https://www.ami.com/security-center/", "name": "https://www.ami.com/security-center/", "refsource": "MISC"}, {"url": "https://www.binarly.io/advisories/BRLY-2022-009", "name": "https://www.binarly.io/advisories/BRLY-2022-009", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-123 Write-what-where Condition"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-40262", "STATE": "PUBLIC", "TITLE": "The arbitrary write vulnerability in S3Resume2Pei leads to arbitrary code execution during PEI phase.", "ASSIGNER": "cert@cert.org", "DATE_PUBLIC": "2022-08-11T01:03:00.000Z"}}}}, "cveMetadata": {"cveId": "CVE-2022-40262", "state": "PUBLISHED", "dateUpdated": "2025-05-27T18:13:02.778Z", "dateReserved": "2022-09-08T00:00:00.000Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2022-09-20T17:35:36.008Z", "assignerShortName": "certcc"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"product": "Aptio", "vendor": "AMI", "versions": [{"status": "affected", "version": "5.x"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:ami:aptio_v:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "FD2A25A0-0CFC-4A63-A7A9-4CD4D2A90FAD", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:server_board_m10jnp2sb_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9685256-1E5E-4EDF-9183-0939D4DE2C3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:server_board_m10jnp2sb:-:*:*:*:*:*:*:*", "matchCriteriaId": "8EAE5D89-ADEC-4F26-B555-52971EEE18A3", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A potential attacker can execute an arbitrary code at the time of the PEI phase and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from any Virtual Machines (VMs) and bypassing memory isolation and confidential computing boundaries. Additionally, an attacker can build a payload which can be injected into the SMRAM memory. This issue affects: Module name: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b19d0253fc Module GUID: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}, {"lang": "es", "value": "Un atacante potencial puede ejecutar un c\u00f3digo arbitrario en el momento de la fase PEI e influir en las etapas de arranque posteriores. Esto puede conllevar a una omisi\u00f3n de mitigaciones, revelaci\u00f3n del contenido de la memoria f\u00edsica, detecci\u00f3n de cualquier secreto de cualquier M\u00e1quina Virtual (VM) y omisi\u00f3n del aislamiento de la memoria y de los l\u00edmites inform\u00e1ticos confidenciales. Adem\u00e1s, un atacante puede construir una carga \u00fatil que puede ser inyectada en la memoria SMRAM. Este problema afecta: Nombre del m\u00f3dulo: S3Resume2Pei SHA256: 7bb29f05534a8a1e010443213451425098faebd45948a4642db969b0253fc GUID del m\u00f3dulo: 89E549B0-7CFE-449D-9BA3-10D8B2312D71"}], "id": "CVE-2022-40262", "lastModified": "2026-06-17T05:01:11.437", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.5, "impactScore": 6.0, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2022-40262", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-05-27T18:12:31.153646Z", "version": "2.0.3"}}]}, "published": "2022-09-20T18:15:10.630", "references": [{"source": "cret@cert.org", "tags": ["Vendor Advisory"], "url": "https://www.ami.com/security-center/"}, {"source": "cret@cert.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.binarly.io/advisories/BRLY-2022-009"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ami.com/security-center/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.binarly.io/advisories/BRLY-2022-009"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-123"}], "source": "cret@cert.org", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}