Xeon Silver 4309Y Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2023-11-14	CVE-2023-23583	Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. local low complexity intel debian netapp	7.8
2023-08-11	CVE-2022-41804	Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity debian fedoraproject intel	6.7
2023-08-11	CVE-2022-43505	Unspecified vulnerability in Intel products Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access. local low complexity intel	4.4
2023-08-11	CVE-2023-23908	Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel debian fedoraproject	4.4
2023-02-16	CVE-2022-33196	Incorrect Default Permissions vulnerability in Intel products Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using Intel(R) Software Guard Extensions which may allow a privileged user to potentially enable escalation of privilege via local access. local low complexity intel CWE-276	6.7
2023-02-16	CVE-2022-33972	Incorrect Calculation vulnerability in Intel products Incorrect calculation in microcode keying mechanism for some 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel CWE-682	4.4
2023-02-16	CVE-2022-38090	Unspecified vulnerability in Intel products Improper isolation of shared resources in some Intel(R) Processors when using Intel(R) Software Guard Extensions may allow a privileged user to potentially enable information disclosure via local access. local low complexity intel	4.4
2023-02-16	CVE-2021-0187	Unspecified vulnerability in Intel products Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable an escalation of privilege via local access. local low complexity intel	8.2
2023-02-16	CVE-2022-21216	Unspecified vulnerability in Intel products Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access. low complexity intel	6.8
2023-02-16	CVE-2022-26837	Improper Input Validation vulnerability in Intel products Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access. local high complexity intel CWE-20	7.0