Insecure Information Storage in Intel DCM Software
CVE-2022-43475

6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Dcm Software
Vendor
CVE Published:
10 May 2023

What is CVE-2022-43475?

The Intel Data Center Manager (DCM) software prior to version 5.1 is vulnerable due to insecure storage of sensitive information. This flaw could allow an authenticated user to exploit this vulnerability to escalate privileges via local access. It is essential for users of Intel DCM to review security practices and upgrade to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Intel(R) DCM software before version 5.1

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.