CVE-2022-32971

CWE-287 — Improper Authentication3 documents3 sources
Severity
7.2HIGH
EPSS
0.3%
top 43.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel System Usage Report
Timeline
PublishedFeb 16

Description

Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:LExploitability: 0.5 | Impact: 2.5

Affected Packages2 packages

▶CVEListV5intel(r)_sur_softwarebefore version 2.4.8902

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

2
CVEList
CVE-2022-32971: Improper authentication in the Intel(R) SUR software before version 2↗2023-02-16
▶
GHSA
GHSA-j4x7-x2fm-q77j: Improper authentication in the Intel(R) SUR software before version 2↗2023-02-16
▶
CVE-2022-32971 (HIGH CVSS 7.2) | Improper authentication in the Inte | cvebase.io