Lucene search

IntelCVE-2022-41614

HistoryFeb 16, 2023 - 9:15 p.m.

CVE-2022-41614

2023-02-1621:15:13

CWE-522

intel

web.nvd.nist.gov

cve-2022-41614

intel

on event series

android

application

credentials

information disclosure

security vulnerability

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

13.2%

JSON

Insufficiently protected credentials in the Intel® ON Event Series Android application before version 2.0 may allow an authenticated user to potentially enable information disclosure via local access.

Affected configurations

Nvd

Vulners

Node

intelon_event_seriesRange<2.0android

VendorProductVersionCPE
intelon_event_series*cpe:2.3:a:intel:on_event_series:*:*:*:*:*:android:*:*

Vendor	Product	Version	CPE
intel	on_event_series	*	cpe:2.3:a:intel:on_event_series::::::android::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) ON Event Series Android application",
    "versions": [
      {
        "version": "before version 2.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

Confidence

High

EPSS

Percentile

13.2%

JSON

Related for CVE-2022-41614