Lucene search

IntelCVE-2022-26369

HistoryNov 11, 2022 - 4:15 p.m.

CVE-2022-26369

2022-11-1116:15:12

CWE-125

intel

web.nvd.nist.gov

cve-2022-26369

intel

xmm 7560 modem

out-of-bounds read

privilege escalation

software vulnerability

nvd

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Out-of-bounds read in some Intel® XMM™ 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access.

Affected configurations

Nvd

Node

intelxmm_7560_firmwareRange<m2_7560_r_01.2146.00

AND

intelxmm_7560Matchm.2

VendorProductVersionCPE
intelxmm_7560_firmware*cpe:2.3:o:intel:xmm_7560_firmware:*:*:*:*:*:*:*:*
intelxmm_7560m.2cpe:2.3:h:intel:xmm_7560:m.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	xmm_7560_firmware	*	cpe:2.3:o:intel:xmm_7560_firmware::::::::
intel	xmm_7560	m.2	cpe:2.3:h:intel:xmm_7560:m.2:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) XMM(TM) 7560 Modem software",
    "versions": [
      {
        "version": "before version M2_7560_R_01.2146.00",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html

Social References

CVSS3

8.1

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H

AI Score

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2022-26369