Uncontrolled Search Path Vulnerability in Intel DCM Software
CVE-2022-41998

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Dcm Software
Vendor
CVE Published:
10 May 2023

What is CVE-2022-41998?

The Intel Data Center Manager (DCM) software is affected by an uncontrolled search path vulnerability. This flaw allows an authenticated user to exploit the software, potentially enabling them to escalate privileges through local access. Users need to be particularly cautious and ensure they are running the latest version to mitigate this risk. For more detailed information, visit Intel's official security advisory.

Affected Version(s)

Intel(R) DCM software before version 5.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.