by Kastro
Paper/Archive/CVE-2022-22730

CVE-2022-22730

intel — Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to p…

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 61.9.619 × 2012.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource
Intel(R) Edge Insights for Industrial softwarebefore version 2.6.1–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html