deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-3948
Published: 2022-11-11
Description: A vulnerability classified as critical was found in eolinker goku_lite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-213454 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-707, CWE-89
References: https://c2.im5i.com/2022/11/09/XOq61.png; https://c2.im5i.com/2022/11/09/XOvUn.png; https://vuldb.com/?id.213454
CVE: CVE-2022-3949
Published: 2022-11-11
Description: A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site scripting. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-213455.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://vuldb.com/?id.213455; https://vuldb.com/?id.213455
CVE: CVE-2022-41854
Published: 2022-11-11
Description: Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-121, CWE-787
References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50355; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3DDXEXXWAZGF5AVHIPGFPXIWL6TSMKJE/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7MKE4XWRXTH32757H7QJU4ACS67DYDCR/
CVE: CVE-2022-3950
Published: 2022-11-11
Description: A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is a972dc9b1c94aea2d84478bf26283904c21e4ca2. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213456.
CVSS Score: 3.5 (LOW)
CWE: CWE-707, CWE-79
References: https://github.com/sanluan/PublicCMS/commit/a972dc9b1c94aea2d84478bf26283904c21e4ca2; https://vuldb.com/?id.213456; https://github.com/sanluan/PublicCMS/commit/a972dc9b1c94aea2d84478bf26283904c21e4ca2
CVE: CVE-2022-3952
Published: 2022-11-11
Description: A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with insecure permissions. Upgrading to version 5.3.3 is able to address this issue. The name of the patch is 94653cb357806c9cf24d8d294e6afea33f8f0775. It is recommended to upgrade the affected component. The identifier VDB-213457 was assigned to this vulnerability.
CVSS Score: 2.6 (LOW)
CWE: CWE-377, CWE-668
References: https://github.com/ManyDesigns/Portofino/commit/94653cb357806c9cf24d8d294e6afea33f8f0775; https://github.com/ManyDesigns/Portofino/pull/580; https://github.com/ManyDesigns/Portofino/releases/tag/v5.3.3
CVE: CVE-2022-3953
Published: 2022-11-11
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE: CVE-2021-26251
Published: 2022-11-11
Description: Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to potentially enable denial of service via network access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00642.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00642.html
CVE: CVE-2021-33064
Published: 2022-11-11
Description: Uncontrolled search path in the software installer for Intel(R) System Studio for all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00558.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00558.html
CVE: CVE-2021-33159
Published: 2022-11-11
Description: Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2021-33164
Published: 2022-11-11
Description: Improper access control in BIOS firmware for some Intel(R) NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.kb.cert.org/vuls/id/434994
CVE: CVE-2022-21198
Published: 2022-11-11
Description: Time-of-check time-of-use race condition in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html
CVE: CVE-2022-21794
Published: 2022-11-11
Description: Improper authentication in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC Business, Intel(R) NUC Enthusiast, Intel(R) NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE: CVE-2022-25917
Published: 2022-11-11
Description: Uncaught exception in the firmware for some Intel(R) Server Board M50CYP Family before version R01.01.0005 may allow a privileged user to potentially enable a denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-755, CWE-755
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html
CVE: CVE-2022-26006
Published: 2022-11-11
Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00688.html
CVE: CVE-2022-26024
Published: 2022-11-11
Description: Improper access control in the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN and NUC7i7DN before version 1.78.2.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00689.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00689.html
CVE: CVE-2022-26028
Published: 2022-11-11
Description: Uncontrolled search path in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00676.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00676.html
CVE: CVE-2022-26045
Published: 2022-11-11
Description: Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 3.3 (LOW)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-26047
Published: 2022-11-11
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi, Intel vPro(R) CSME WiFi and Killer(TM) WiFi products may allow unauthenticated user to potentially enable denial of service via local access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-1284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00699.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00699.html
CVE: CVE-2022-26079
Published: 2022-11-11
Description: Improper conditions check in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-754, CWE-754
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-26086
Published: 2022-11-11
Description: Uncontrolled search path element in the PresentMon software maintained by Intel(R) before version 1.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00711.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00711.html
CVE: CVE-2022-26124
Published: 2022-11-11
Description: Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NUC 8 Rugged Boards and Intel(R) NUC 8 Rugged Kits before version CHAPLCEL.0059 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE: CVE-2022-26341
Published: 2022-11-11
Description: Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before version 1.7.1 and Intel(R) MC before version 2.3.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00680.html
CVE: CVE-2022-26367
Published: 2022-11-11
Description: Improper buffer restrictions in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-26369
Published: 2022-11-11
Description: Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-26508
Published: 2022-11-11
Description: Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00710.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00710.html
CVE: CVE-2022-26513
Published: 2022-11-11
Description: Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-26845
Published: 2022-11-11
Description: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.7 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2022-27187
Published: 2022-11-11
Description: Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html
CVE: CVE-2022-27233
Published: 2022-11-11
Description: XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-91, CWE-91
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00659.html
CVE: CVE-2022-27497
Published: 2022-11-11
Description: Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 8.6 (HIGH)
CWE: CWE-476, CWE-476
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2022-27499
Published: 2022-11-11
Description: Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 2.5 (LOW)
CWE: CWE-672, CWE-672
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00691.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00691.html
CVE: CVE-2022-27638
Published: 2022-11-11
Description: Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.html
CVE: CVE-2022-27639
Published: 2022-11-11
Description: Incomplete cleanup in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-27874
Published: 2022-11-11
Description: Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-28126
Published: 2022-11-11
Description: Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-28611
Published: 2022-11-11
Description: Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00683.html
CVE: CVE-2022-28667
Published: 2022-11-11
Description: Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00687.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00687.html
CVE: CVE-2022-29466
Published: 2022-11-11
Description: Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2022-29486
Published: 2022-11-11
Description: Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00695.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00695.html
CVE: CVE-2022-29515
Published: 2022-11-11
Description: Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-401, CWE-401
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2022-29893
Published: 2022-11-11
Description: Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an authenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00610.html
CVE: CVE-2022-30297
Published: 2022-11-11
Description: Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-79, CWE-79
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00716.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00716.html
CVE: CVE-2022-30542
Published: 2022-11-11
Description: Improper input validation in the firmware for some Intel(R) Server Board S2600WF, Intel(R) Server System R1000WF and Intel(R) Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00708.html
CVE: CVE-2022-30548
Published: 2022-11-11
Description: Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00673.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00673.html
CVE: CVE-2022-30691
Published: 2022-11-11
Description: Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00740.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00740.html
CVE: CVE-2022-32569
Published: 2022-11-11
Description: Improper buffer restrictions in BIOS firmware for some Intel(R) NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE: CVE-2022-33176
Published: 2022-11-11
Description: Improper input validation in BIOS firmware for some Intel(R) NUC 11 Performance kits and Intel(R) NUC 11 Performance Mini PCs before version PATGL357.0042 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00752.html
CVE: CVE-2022-33942
Published: 2022-11-11
Description: Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00713.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00713.html