MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-41314

CVSS 6.7v3.1pub. 2023-02-16upd. 2024-11-21

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

  • Intel Administrative Tools For Intel Network Adapters

    APP
    Intel
    < 27.3

  • Intel Ethernet Controller E810

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda1 For Ocp 3.0

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda2

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Cqda2 For Ocp 3.0

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Xxvda2

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Xxvda2 For Ocp

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Xxvda2 For Ocp 3.0

    HW
    Intel
    all versions

  • Intel Ethernet Network Adapter E810 Xxvda4

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Cam1

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Cam2

    HW
    Intel
    all versions

  • Intel Ethernet Network Controller E810 Xxvam2

    HW
    Intel
    all versions

  • Intel Non Volatile Memory Update Utility

    APP
    Intel
    < 4.01
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2021-33058HIGH7.8same product

Improper access control in the installer Intel(R)Administrative Tools for Intel(R) Network Adaptersfor Windows...

CVE-2021-0002HIGH7.1same product

Improper conditions check in some Intel(R) Ethernet Controllers 800 series Linux drivers before version 1.4.11...

CVE-2021-0084HIGH7.8same product

Improper input validation in the Intel(R) Ethernet Controllers X722 and 800 series Linux RMDA driver before ve...

CVE-2019-0159HIGH7.8same product

Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version ...

CVE-2025-24851MEDIUM6.7same product

Nieobsłużony wyjątek w firmware'u algunych kontrolerów Ethernet 100GbE Intel(R) E810 przed wersją cvl fw 1.7.8...