MEDIUM✓ PATCH🇬🇧 English

CVE-2022-41314

CVSS 6.7v3.1pub. 2023-02-16upd. 2024-11-21

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.

oryginał EN
CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Intel Administrative Tools For Intel Network Adapters

    APP
    Intel
    < 27.3

  • Intel Ethernet Controller E810

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Cqda1

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Cqda2

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Xxvda2

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Xxvda2 For Ocp

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Xxvda2 For Ocp 3.0

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Adapter E810 Xxvda4

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Controller E810

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Controller E810 Cam1

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Controller E810 Cam2

    HW
    Intel
    wszystkie wersje

  • Intel Ethernet Network Controller E810 Xxvam2

    HW
    Intel
    wszystkie wersje

  • Intel Non Volatile Memory Update Utility

    APP
    Intel
    < 4.01
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
CWE
Referencje

Powiązane podatności

CVE-2021-33058HIGH7.8ten sam produkt

Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windows...

CVE-2021-0002HIGH7.1ten sam produkt

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11...

CVE-2021-0084HIGH7.8ten sam produkt

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before ve...

CVE-2019-0159HIGH7.8ten sam produkt

Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version ...

CVE-2025-24851MEDIUM6.7ten sam produkt

Uncaught exception in the firmware for some 100GbE Intel(R) Ethernet Controller E810 before version cvl fw 1.7...

CVE-2022-41314 — MEDIUM 6.7 | CVEbaza.pl