Lucene search

K
cvelistIntelCVELIST:CVE-2022-38973
HistoryAug 11, 2023 - 2:36 a.m.

CVE-2022-38973

2023-08-1102:36:59
CWE-284
intel
www.cve.org
5
intel graphics cards
access control
denial of service
information disclosure
local access
cve-2022-38973

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Improper access control for some Intelยฎ Arcโ„ข graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition",
    "versions": [
      {
        "version": "sold between October of 2022 and December of 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

AI Score

7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2022-38973