Improper Access Control in Intel QAT Drivers for Windows
CVE-2022-40972

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Qat Drivers For Windows
Vendor
CVE Published:
10 May 2023

What is CVE-2022-40972?

An improper access control vulnerability exists in Intel QAT drivers for Windows prior to version 1.9.0. This flaw may allow an authenticated user to exploit the system, potentially enabling escalation of privileges through local access. Such vulnerabilities can expose sensitive data or compromise system integrity if not addressed promptly.

Affected Version(s)

Intel(R) QAT drivers for Windows before version 1.9.0

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.