CVE-2022-26047

CWE-20 — Improper Input ValidationCWE-12844 documents4 sources
Severity
6.5MEDIUM
EPSS
0.2%
top 64.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Intel Converged Security AND Manageability EngineIntel Killer Wifi SoftwareIntel Proset\/wireless Wifi+1 more
Timeline
PublishedNov 11

Description

Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶NVDintel/killer_wifi_software< 3.1122.3158
▶NVDintel/uefi_wifi_driver< 2.2.14.22176

🔴Vulnerability Details

3
CVEList
CVE-2022-26047: Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user↗2022-11-11
▶
OSV
CVE-2022-26047: Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user↗2022-11-11
▶
GHSA
GHSA-52hm-mmj8-wwc8: Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user↗2022-11-11
▶
CVE-2022-26047 (MEDIUM CVSS 6.5) | Improper input validation for some | cvebase.io