Lucene search

K
cvelistIntelCVELIST:CVE-2022-36416
HistoryFeb 16, 2023 - 8:00 p.m.

CVE-2022-36416

2023-02-1620:00:24
intel
www.cve.org
6
cve-2022-36416
intel ethernet
vmware
privilege escalation
local access

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

8

Confidence

High

EPSS

0

Percentile

13.2%

Protection mechanism failure in the Intel® Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Ethernet 500 Series Controller drivers for VMware",
    "versions": [
      {
        "version": "before version 1.10.0.13",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

AI Score

8

Confidence

High

EPSS

0

Percentile

13.2%

Related for CVELIST:CVE-2022-36416