Paper/Archive/CVE-2022-33964

CVE-2022-33964

intel — Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable es…

EPSS 0.6%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 51.0.510 × 2010.2 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource

Intel(R) SUR softwarebefore version 2.4.8902–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

intel (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html