fr Sign in

7.9 High

CVE-2022-21198 Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user…

Description

Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

Affected products and versions

Product	Affected versions	Fixed in
Intel(R) Processors	Versions not published
SIMATIC Field PG M5 22.01	earliest → < 22.01.11	22.01.11
SIMATIC Field PG M6 26.01	earliest → < 26.01.11	26.01.11
SIMATIC IPC BX-39A 29.01	earliest → < 29.01.03	29.01.03
SIMATIC IPC PX-39A 29.01	earliest → < 29.01.03	29.01.03
SIMATIC IPC PX-39A PRO 29.01	earliest → < 29.01.03	29.01.03
SIMATIC IPC427E 21.01	earliest → < 21.01.19	21.01.19
SIMATIC IPC477E 21.01	earliest → < 21.01.19	21.01.19
SIMATIC IPC477E PRO 21.01	earliest → < 21.01.19	21.01.19

Show the 6 other branches

Product	Affected versions	Fixed in
SIMATIC IPC627E 25.02	earliest → < 25.02.14	25.02.14
SIMATIC IPC647E 25.02	earliest → < 25.02.14	25.02.14
SIMATIC IPC677E 25.02	earliest → < 25.02.14	25.02.14
SIMATIC IPC847E 25.02	earliest → < 25.02.14	25.02.14
SIMATIC ITP1000	Versions not published
SIPLUS IPC427E 21.01	earliest → < 21.01.19	21.01.19

References

www.intel.com www.intel.com

Timeline

Published November 11, 2022
Last modified August 11, 2026

The 119 CVEs of Intel(R) Processors →

CVE-2026-20917 Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R)… 4.0 Medium CVE-2025-35973 Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow… 4.5 Medium CVE-2026-20760 Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within… 6.8 Medium CVE-2026-20716 Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of… 7.2 High

Track this CVE