Intel System Usage Report vulnerabilities

10 known vulnerabilities affecting intel/system_usage_report.

Total CVEs

10

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL2HIGH7MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-40154HIGHCVSS 7.8fixed in 2.0.19012024-02-14

CVE-2023-40154 [MEDIUM] CWE-276 CVE-2023-40154: Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access.

CVE-2022-40207HIGHCVSS 7.8fixed in 2.4.89892023-05-10

CVE-2022-40207 [HIGH] CWE-284 CVE-2022-40207: Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authentica Improper access control in the Intel(R) SUR software before version 2.4.8989 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-29514CRITICALCVSS 9.8fixed in 2.4.89022023-02-16

CVE-2022-29514 [HIGH] CVE-2022-29514: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenti Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

CVE-2022-33964CRITICALCVSS 9.8fixed in 2.4.89022023-02-16

CVE-2022-33964 [HIGH] CWE-20 CVE-2022-33964: Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthen Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access.

CVE-2022-30692HIGHCVSS 7.5fixed in 2.4.89022023-02-16

CVE-2022-30692 [MEDIUM] CWE-754 CVE-2022-30692: Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthen Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable denial of service via network access.

CVE-2022-34854HIGHCVSS 7.8fixed in 2.4.89022023-02-16

CVE-2022-34854 [MEDIUM] CVE-2022-34854: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authentica Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-33190HIGHCVSS 7.8fixed in 2.4.89022023-02-16

CVE-2022-33190 [HIGH] CWE-20 CVE-2022-33190: Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenti Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-33946HIGHCVSS 7.8fixed in 2.4.89022023-02-16

CVE-2022-33946 [MEDIUM] CWE-287 CVE-2022-33946: Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authentica Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVE-2022-32971HIGHCVSS 7.2fixed in 2.4.89022023-02-16

CVE-2022-32971 [LOW] CWE-287 CVE-2022-32971: Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow a privileged user to potentially enable escalation of privilege via network access.

CVE-2022-31476MEDIUMCVSS 5.5fixed in 2.4.89022023-02-16

CVE-2022-31476 [MEDIUM] CVE-2022-31476: Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authentica Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access.