CVE-2022-46329
published 2023-08-11CVE-2022-46329: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via…
PriorityP425medium6.7CVSS 3.1
AVLACLPRHUINSUCHIHAH
EPSS
0.28%
19.8th percentile
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | firmware-nonfree | < firmware-nonfree 20240610-1 (forky) | firmware-nonfree 20240610-1 (forky) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| intel | killer | < 34.22.1163 | 34.22.1163 |
| intel | proset_wireless_wifi | < 22.200 | 22.200 |
| intel | uefi_firmware | < 3.2.20.23023 | 3.2.20.23023 |
| intel_proset | wireless_wifi_software | — | — |
CVSS provenance
nvdv3.16.7MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
osv6.7MEDIUM
vendor_debian8.2HIGH
vendor_redhat8.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8r5h-8rgj-gp3x: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege
ghsa_unreviewed·2023-08-11
CVE-2022-46329 [MEDIUM] CWE-693 GHSA-8r5h-8rgj-gp3x: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
OSV
CVE-2022-46329: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege
osv·2023-08-11·CVSS 6.7
CVE-2022-46329 [MEDIUM] CVE-2022-46329: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Red Hat
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
vendor_redhat·2023-08-08·CVSS 8.2
CVE-2022-46329 [HIGH] CWE-693 hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access.
Mitigation: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
Debian
CVE-2022-46329: firmware-nonfree - Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may...
vendor_debian·2022·CVSS 8.2
CVE-2022-46329 [HIGH] CVE-2022-46329: firmware-nonfree - Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may...
Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 20240610-1)
sid: resolved (fixed in 20240610-1)
trixie: resolved (fixed in 20240610-1)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.htmlhttps://lists.debian.org/debian-lts-announce/2023/09/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/https://lists.fedoraproject.org/archives/list/[email protected]/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/https://lists.fedoraproject.org/archives/list/[email protected]/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.htmlhttps://lists.debian.org/debian-lts-announce/2023/09/msg00043.htmlhttps://lists.fedoraproject.org/archives/list/[email protected]/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/https://lists.fedoraproject.org/archives/list/[email protected]/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/https://lists.fedoraproject.org/archives/list/[email protected]/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
2023-08-11
Published