Lucene search
HistoryFeb 16, 2023 - 9:15 p.m.
CVE-2022-32971
intel sur software
authentication
vulnerability
privilege escalation
network access
cve-2022-32971
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
43.3%
Improper authentication in the Intel® SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access.
Affected configurations
Node
intelsystem_usage_reportRange<2.4.8902
| Vendor | Product | Version | CPE |
|---|---|---|---|
| intel | system_usage_report | * | cpe:2.3:a:intel:system_usage_report:*:*:*:*:*:*:*:* |
Related
prion
prion
Authentication flaw
2023-02-16 21:15:00
cve
cve
CVE-2022-32971
2023-02-16 21:15:12
cvelist
cvelist
CVE-2022-32971
2023-02-16 20:00:14
intel
intel
Intel® SUR Advisory
2023-02-14 00:00:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
5.3
Confidence
High
EPSS
0.001
Percentile
43.3%
Related for NVD:CVE-2022-32971