CVE-2022-40207 — Improper Access Control in Intel System Usage Report

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.8HIGHNVD
CNA8.2
EPSS
0.1%
top 76.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Intel System Usage Report
Timeline
PublishedMay 10

Description

Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
CVEList
CVE-2022-40207: Improper access control in the Intel(R) SUR software before version 2↗2023-05-10
▶
GHSA
GHSA-r2gh-j25f-3cvj: Improper access control in the Intel(R) SUR software before version 2↗2023-05-10
▶
CVE-2022-40207 — Improper Access Control in Intel | cvebase