Lucene search

K
redhatcveRedhat.comRH:CVE-2022-40964
HistorySep 17, 2023 - 5:54 p.m.

CVE-2022-40964

2023-09-1717:54:16
redhat.com
access.redhat.com
12
intel
wifi
access control
privilege escalation
uefi firmware

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%

An improper access control flaw was found in some Intelยฎ PROSet/Wireless WiFi and Killerโ„ข WiFi software that may allow a privileged user to enable escalation of privilege via local access.

Mitigation

UEFI firmware to version 3.2.20.23023 (includes versions 2.2.20.23023 and 1.2.20.23023)or later.

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%