Paper/Archive/CVE-2022-29514

CVE-2022-29514

intel — Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable esca…

EPSS 0.6%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 47.3.473 × 209.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource

Intel(R) SUR softwarebefore version 2.4.8902–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

intel (CNA)7.7CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html