CVE-2022-40964

CWE-284 — Improper Access Control6 documents6 sources
Severity
6.7MEDIUM
EPSS
0.0%
top 91.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Intel KillerIntel Proset\/wireless WifiIntel Uefi Firmware+3 more
Timeline
PublishedAug 11

Description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:HExploitability: 1.5 | Impact: 5.8

Affected Packages5 packages

▶NVDintel/killer< 34.22.1163
▶NVDintel/uefi_firmware< 3.2.20.23023
▶Debianfirmware-nonfree< 20240610-1+1

Also affects: Debian Linux 10.0, Fedora 37, 38, 39

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

3
CVEList
CVE-2022-40964: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalati↗2023-08-11
▶
OSV
CVE-2022-40964: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalati↗2023-08-11
▶
GHSA
GHSA-2hj4-qrq6-rw3w: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalati↗2023-08-11
▶

📋Vendor Advisories

2
Red Hat
hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi↗2023-08-08
▶
Debian
CVE-2022-40964: firmware-nonfree - Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) Wi...↗2022
▶
CVE-2022-40964 (MEDIUM CVSS 6.7) | Improper access control for some In | cvebase.io