Lucene search

K
nvd[email protected]NVD:CVE-2022-26344
HistoryAug 18, 2022 - 8:15 p.m.

CVE-2022-26344

2022-08-1820:15:10
CWE-276
web.nvd.nist.gov
4
cve-2022-26344
intel seapi
installation binaries
privilege escalation
local access.

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Incorrect default permissions in the installation binaries for Intel® SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelsingle_event_api
VendorProductVersionCPE
intelsingle_event_api*cpe:2.3:a:intel:single_event_api:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2022-26344