deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-21172
Published: 2022-08-18
Description: Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21181
Published: 2022-08-18
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://lists.debian.org/debian-lts-announce/2023/04/msg00002.html
CVE: CVE-2022-21197
Published: 2022-08-18
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21212
Published: 2022-08-18
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21225
Published: 2022-08-18
Description: Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.0 (HIGH)
References: http://packetstormsecurity.com/files/170180/Intel-Data-Center-Manager-4.1-SQL-Injection.html; http://seclists.org/fulldisclosure/2022/Dec/1; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
CVE: CVE-2022-21229
Published: 2022-08-18
Description: Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00665.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00809.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00665.html
CVE: CVE-2022-21233
Published: 2022-08-18
Description: Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2023/04/msg00000.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00657.html
CVE: CVE-2022-21240
Published: 2022-08-18
Description: Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00621.html
CVE: CVE-2022-21793
Published: 2022-08-18
Description: Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00650.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00650.html
CVE: CVE-2022-21807
Published: 2022-08-18
Description: Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00658.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00658.html
CVE: CVE-2022-21812
Published: 2022-08-18
Description: Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00655.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00655.html
CVE: CVE-2022-22730
Published: 2022-08-18
Description: Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE: CVE-2022-23182
Published: 2022-08-18
Description: Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
CVE: CVE-2022-23403
Published: 2022-08-18
Description: Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
CVE: CVE-2022-24378
Published: 2022-08-18
Description: Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
CVE: CVE-2022-25228
Published: 2022-08-18
Description: CandidATS Version 3.0.0 Beta allows an authenticated user to inject SQL queries in '/index.php?m=settings&a=show' via the 'userID' parameter, in '/index.php?m=candidates&a=show' via the 'candidateID', in '/index.php?m=joborders&a=show' via the 'jobOrderID' and '/index.php?m=companies&a=show' via the 'companyID' parameter
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://candidats.net/forums/; https://fluidattacks.com/advisories/jackson/; https://candidats.net/forums/
CVE: CVE-2022-25841
Published: 2022-08-18
Description: Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00678.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00678.html
CVE: CVE-2022-25899
Published: 2022-08-18
Description: Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00694.html
CVE: CVE-2022-25966
Published: 2022-08-18
Description: Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00653.html
CVE: CVE-2022-25999
Published: 2022-08-18
Description: Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00672.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00672.html
CVE: CVE-2022-26017
Published: 2022-08-18
Description: Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.0 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00679.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00679.html
CVE: CVE-2022-26074
Published: 2022-08-18
Description: Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00669.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-26344
Published: 2022-08-18
Description: Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html
CVE: CVE-2022-26373
Published: 2022-08-18
Description: Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://lists.debian.org/debian-lts-announce/2022/09/msg00011.html; https://lists.debian.org/debian-lts-announce/2022/10/msg00000.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-26374
Published: 2022-08-18
Description: Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html
CVE: CVE-2022-26844
Published: 2022-08-18
Description: Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00701.html
CVE: CVE-2022-27500
Published: 2022-08-18
Description: Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00660.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00660.html
CVE: CVE-2022-28696
Published: 2022-08-18
Description: Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00684.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00684.html
CVE: CVE-2022-28709
Published: 2022-08-18
Description: Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00593.html
CVE: CVE-2022-28757
Published: 2022-08-18
Description: The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to root.
CVSS Score: 8.8 (HIGH)
CWE: CWE-345
References: https://explore.zoom.us/en/trust/security/security-bulletin/; https://explore.zoom.us/en/trust/security/security-bulletin/
CVE: CVE-2022-29507
Published: 2022-08-18
Description: Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-522, CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00705.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00705.html
CVE: CVE-2022-2568
Published: 2022-08-18
Description: A privilege escalation flaw was found in the Ansible Automation Platform. This flaw allows a remote authenticated user with 'change user' permissions to modify the account settings of the superuser account and also remove the superuser privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: https://bugzilla.redhat.com/show_bug.cgi?id=2108653; https://bugzilla.redhat.com/show_bug.cgi?id=2108653
CVE: CVE-2022-30296
Published: 2022-08-18
Description: Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522, CWE-522
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00703.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00703.html
CVE: CVE-2022-35212
Published: 2022-08-18
Description: osCommerce2 before v2.3.4.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the function tep_db_error().
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://forums.oscommerce.com/topic/497119-potencial-xss-vulnerability/?tab=comments#comment-1823082; https://forums.oscommerce.com/topic/497119-potencial-xss-vulnerability/?tab=comments#comment-1823082
CVE: CVE-2022-35213
Published: 2022-08-18
Description: Ecommerce-CodeIgniter-Bootstrap before commit 56465f was discovered to contain a cross-site scripting (XSS) vulnerability via the function base_url() at /blog/blogpublish.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/56465fb6a83aaa934a76615a[PII_REDACTED]b790a1; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/issues/219; https://github.com/kirilkirkov/Ecommerce-CodeIgniter-Bootstrap/commit/56465fb6a83aaa934a76615a[PII_REDACTED]b790a1
CVE: CVE-2022-36722
Published: 2022-08-18
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /librarian/history.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-14.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-14.md
CVE: CVE-2022-36725
Published: 2022-08-18
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /student/dele.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-15.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-15.md
CVE: CVE-2022-36727
Published: 2022-08-18
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /staff/delete.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-16.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-16.md
CVE: CVE-2022-36728
Published: 2022-08-18
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /staff/delstu.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-17.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-17.md
CVE: CVE-2022-36729
Published: 2022-08-18
Description: Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /librarian/del.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-18.md; https://github.com/k0xx11/bug_report/blob/main/vendors/kingbhob02/library-management-system/SQLi-18.md
CVE: CVE-2022-37047
Published: 2022-08-18
Description: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_ipv6_next at common/get.c:713. NOTE: this is different from CVE-2022-27940.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/appneta/tcpreplay/issues/734; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
CVE: CVE-2022-37048
Published: 2022-08-18
Description: The component tcprewrite in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in get_l2len_protocol at common/get.c:344. NOTE: this is different from CVE-2022-27941.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/appneta/tcpreplay/issues/735; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
CVE: CVE-2022-37049
Published: 2022-08-18
Description: The component tcpprep in Tcpreplay v4.4.1 was discovered to contain a heap-based buffer overflow in parse_mpls at common/get.c:150. NOTE: this is different from CVE-2022-27942.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://github.com/appneta/tcpreplay/issues/736; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5B75AFRJUGOYHCFG2ZV2JKSUPA6MSCT5/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ECRCFJ6X3IVB7BT4KS6AHQMSL532YXYD/
CVE: CVE-2022-37768
Published: 2022-08-18
Description: libjpeg commit 281daa9 was discovered to contain an infinite loop via the component Frame::ParseTrailer.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: https://github.com/thorfdbg/libjpeg/issues/77; https://github.com/thorfdbg/libjpeg/issues/77
CVE: CVE-2022-37769
Published: 2022-08-18
Description: libjpeg commit 281daa9 was discovered to contain a segmentation fault via HuffmanDecoder::Get at huffmandecoder.hpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/thorfdbg/libjpeg/issues/78; https://github.com/thorfdbg/libjpeg/issues/78
CVE: CVE-2022-37770
Published: 2022-08-18
Description: libjpeg commit 281daa9 was discovered to contain a segmentation fault via LineMerger::GetNextLowpassLine at linemerger.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted file.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-119
References: https://github.com/thorfdbg/libjpeg/issues/79; https://github.com/thorfdbg/libjpeg/issues/79
CVE: CVE-2022-27493
Published: 2022-08-18
Description: Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665, CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-28697
Published: 2022-08-18
Description: Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2022-28858
Published: 2022-08-18
Description: Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00712.html
CVE: CVE-2022-30601
Published: 2022-08-18
Description: Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated user to potentially enable information disclosure and escalation of privilege via network access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522, CWE-522
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00709.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/