Improper Access Control in Intel SUR Software Allows Privilege Escalation
CVE-2022-34854

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Sur Software
Vendor
CVE Published:
16 February 2023

What is CVE-2022-34854?

The Intel SUR software prior to version 2.4.8902 is susceptible to a vulnerability due to improper access control. An authenticated user could exploit this flaw to potentially escalate their privileges through local access. This issue highlights critical flaws in access management within the software, allowing for unauthorized actions that could compromise system integrity. Organizations using the affected versions should prioritize updating to mitigate risks associated with this vulnerability. For more detailed information, refer to Intel's advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) SUR software before version 2.4.8902

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.