Improper Access Control in Intel Edge Insights for Industrial Software
CVE-2022-21148

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Edge Insights For Industrial Software
Vendor
CVE Published:
18 August 2022

What is CVE-2022-21148?

The Intel Edge Insights for Industrial software experienced a vulnerability due to improper access control. This flaw allows an authenticated user to potentially escalate privileges through local access, potentially leading to unauthorized actions within the software. Users are encouraged to update to version 2.6.1 or later to mitigate this risk.

Affected Version(s)

Intel(R) Edge Insights for Industrial software before version 2.6.1

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.