Lucene search

K
nvd[email protected]NVD:CVE-2022-38973
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2022-38973

2023-08-1103:15:14
CWE-284
web.nvd.nist.gov
intel arc graphics cards
access control
denial of service
information disclosure
local access
cve-2022-38973
october-december 2022

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Improper access control for some Intelยฎ Arcโ„ข graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access.

Affected configurations

NVD
Node
intelarc_a750_firmwareMatch-
AND
intelarc_a750Match-
Node
intelarc_a770_firmwareMatch-
AND
intelarc_a770Match-

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for NVD:CVE-2022-38973