Shulou(Shulou.com)11/24 Report--

CTOnews.com Intel has addressed multiple vulnerabilities found in its Software Guard Extensions (SGX) and urges users to update their application patches as soon as possible.

According to reports, these defects involve "a wide range of Intel products," including Xeon processors, network adapters and software. Today, Intel Security Center added a total of 31 warnings, including five CVE risks. Of these five vulnerabilities, two could be used to empower illegal applications, leading to theft of sensitive data.

The third vulnerability, CVE-2022-38090, is a medium risk vulnerability affecting third-generation Xeon Scalable processors. According to Intel,"improper segregation of shared resources in certain Intel processors may allow privileged users to potentially leak information through local access when using Intel SGX. "

Intel says the best way to do this is to update your device firmware, and CTOnews.com here also strongly recommends affected users update the patch.

The fourth vulnerability, CVE-2022-33196, is a high-severity vulnerability that also affects third-generation Xeon Scalable processors, but also Xeon D processors. The company says it is developing patches in the form of BIOS and microcode.

The fifth vulnerability affects SGX's Software Development Kit (SDK). Intel said that although the vulnerability is of a low severity, it is still possible for criminals to exploit it to steal sensitive data and is currently developing an updated fix.

SGX is now in its eighth year of life, and although it has been "buggy," the tool has actually been deprecated in consumer processors such as the 11th and 12th generation cores.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.