Improper Access Control in Intel Aptio V UEFI Firmware Integrator Tools
CVE-2022-36396

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Aptio* V Uefi Firmware Integrator Tools
Vendor
CVE Published:
14 November 2023

What is CVE-2022-36396?

A vulnerability in Intel Aptio V UEFI Firmware Integrator Tools allows a privileged user to potentially escalate their privileges through local access, impacting system security. Specifically, improper access control mechanisms present in versions prior to iDmiEdit-Linux-5.27.06.0017 pose a risk of unauthorized privilege escalation.

Affected Version(s)

Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.