CVE-2022-44611

2023-08-1102:37:00

CWE-20

intel

www.cve.org

cve-2022-44611

privileged user

escalation of privilege

intel processors

input validation

bios firmware

adjacent access

6.9 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:L

0.0004 Low

EPSS

Percentile

9.1%

JSON

Improper input validation in the BIOS firmware for some Intel® Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Processors",
    "versions": [
      {
        "version": "See references",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]