CVE-2022-32971

CVE-2022-32971 describes an improper authentication flaw in the Intel® SUR software (pre-2.4.8902) that may allow a privileged user to escalate privileges over the network. The vulnerability affects Intel SUR software prior to version 2.4.8902; the root cause is authentication bypass/weak enforce...

CVE-2022-30692

CVE-2022-30692 affects Intel(R) SUR software prior to version 2.4.8902. The root cause is an improper conditions check, enabling an unauthenticated user to potentially cause denial of service via network access. Affected products are Intel SUR software before 2.4.8902. Remediation per sources is ...

CVE-2022-33946

Intel SUR software prior to version 2.4.8902 contains an improper authentication flaw that can allow an authenticated local user to escalate privileges. Affected product: Intel® System Usage Report (SUR) software. Root cause: improper authentication controls enabling privilege escalation via loca...

CVE-2022-31476

CVE-2022-31476 affects Intel SUR software prior to version 2.4.8902. The issue is improper access control that may allow an authenticated user to cause denial of service via local access. The vulnerability is documented across multiple sources, including the Intel SUR advisory and Red Hat/NVD rec...

CVE-2022-34854

CVE-2022-34854 affects Intel® SUR software before version 2.4.8902 due to improper access control. An authenticated user could potentially escalate privileges via local access. Affected product: Intel® SUR software; root cause: improper access control. Impact is reflected as high confidentiality,...

CVE-2022-33190

CVE-2022-33190 affects Intel® SUR software prior to 2.4.8902. The issue is improper input validation in the SUR component, which may allow an authenticated user to potentially escalate privileges via local access. The vulnerability is triggered in the Intel SUR software before version 2.4.8902, w...

CVE-2022-29514

The CVE-2022-29514 entry concerns Intel® SUR software prior to version 2.4.8902, with an underlying issue of improper access control that may allow an unauthenticated user to escalate privileges via network access. Affects Intel® SUR before 2.4.8902; remediation is to update to version 2.4.8902 o...

CVE-2022-33964

Intel SUR software before version 2.4.8902 is affected by CVE-2022-33964 due to improper input validation, potentially allowing an unauthenticated attacker to escalate privileges via network access. The issue is documented across multiple sources (NVD, Red Hat, PRION, Intel advisory) with high/cr...

CVE-2023-40154

CVE-2023-40154 affects Intel® SUR for Gameplay Software prior to version 2.0.1901, where incorrect default permissions may allow a privileged local user to escalate privileges. The issue is documented by Red Hat, NVD, and Intel’s advisory, with confirmed affected product and root cause as stated....

CVE-2022-40207

CVE-2022-40207 affects Intel® SUR software prior to version 2.4.8989. The vulnerability is due to improper access control, potentially allowing an authenticated local user to escalate privileges. Intel’s advisory and multiple feeds confirm the issue, with CVSS v3.1 base metrics indicating high im...