CVE-2022-40964

Опубликовано: 11 авг. 2023

Источник: nvd

CVSS3: 7.9

CVSS3: 6.7

EPSS Низкий

Описание

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

Ссылки

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
Mailing List
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
Mailing List

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*

Версия до 34.22.1163 (исключая)

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

Версия до 22.200 (исключая)

cpe:2.3:a:intel:uefi_firmware:*:*:*:*:*:*:*:*

Версия до 3.2.20.23023 (исключая)

Одно из

cpe:2.3:h:intel:killer_wi-fi_6_ax1650i\/s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:killer_wi-fi_6e_ax1675i\/s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:killer_wi-fi_6e_ax1675x\/w:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:killer_wi-fi_6e_ax1690i\/s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:killer_wireless-ac_1550i\/s:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wi-fi_6e_ax210:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wi-fi_6e_ax211:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wi-fi_6e_ax411:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9461:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9462:-:*:*:*:*:*:*:*

cpe:2.3:h:intel:wireless-ac_9560:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00023

Низкий

7.9 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-284

NVD-CWE-Other

Связанные уязвимости

CVE-2022-40964

CVSS3: 7.9

ubuntu

почти 2 года назад

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2022-40964

CVSS3: 7.9

redhat

почти 2 года назад

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2022-40964

CVSS3: 7.9

debian

почти 2 года назад

Improper access control for some Intel(R) PROSet/Wireless WiFi and Kil ...

GHSA-2hj4-qrq6-rw3w

CVSS3: 7.9

github

почти 2 года назад

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

BDU:2023-05154

CVSS3: 6.7

fstec

почти 2 года назад

Уязвимость утилиты для подключения к сети Intel PROSet/Wireless WiFi и Killer WiFi, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 5%

0.00023

Низкий

7.9 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-284

NVD-CWE-Other