Potential Escalation of Privilege via Local Access in Intel Ethernet Adapters and I225 Manageability Firmware
CVE-2022-37341

7.2HIGH

Key Information:

Vendor
Intel
Status
Intel(r) Ethernet Adapters And Intel(r) Ethernet Controller I225 Manageability Firmware
Vendor
CVE Published:
16 May 2024

Summary

An improper access control vulnerability exists in specific Intel Ethernet Adapters and the Intel Ethernet Controller I225 Manageability firmware. This flaw enables a privileged user to potentially escalate their privileges through local access. The vulnerability highlights the importance of strong access control measures to prevent unauthorized privilege escalation and maintain the integrity of network resources.

Affected Version(s)

Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware See references

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.2
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.