Uncontrolled Search Path Vulnerability in Intel XTU Software
CVE-2022-22139

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Xtu Software
Vendor
CVE Published:
12 May 2022

What is CVE-2022-22139?

An uncontrolled search path vulnerability exists in Intel XTU software prior to version 7.3.0.33, which may allow an authenticated user to exploit local access for privilege escalation. This issue arises from improper validation leading to the potential execution of unauthorized processes. Users are advised to update to the latest version to protect against this vulnerability.

Affected Version(s)

Intel(R) XTU software before version 7.3.0.33

References

https://www.intel.com/content/www/us/en/security-center/a...
x_refsource_MISC

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.