CVE-2022-37341

CWE-284 — Improper Access Control5 documents5 sources

Severity

7.8HIGH

EPSS

0.0%

top 89.85%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Ethernet Adapter Complete Driver Intel Ethernet Controller I225-it Firmware Intel Ethernet Controller I225-lm Firmware +1 more

Timeline

PublishedMay 16

Description

Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:HExploitability: 0.8 | Impact: 5.8

Affected Packages5 packages

▶CVEListV5intel(r)_ethernet_adapters_and_intel(r)_ethernet_controller_i225_manageability_firmwareSee references

▶NVDintel/ethernet_controller_i225-v_firmware< 1.87

▶NVDintel/ethernet_controller_i225-it_firmware< 1.87

▶NVDintel/ethernet_controller_i225-lm_firmware< 1.87

▶NVDintel/ethernet_adapter_complete_driver< 29.0.1

🔴Vulnerability Details

GHSA

GHSA-hh4g-rh5c-8w86: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to↗2024-05-16

▶

OSV

CVE-2022-37341: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to↗2024-05-16

▶

CVEList

CVE-2022-37341: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to↗2024-05-16

▶