CVE-2022-46329

Опубликовано: 11 авг. 2023

Источник: nvd

CVSS3: 8.2

CVSS3: 6.7

EPSS Низкий

Описание

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

Ссылки

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
Third Party Advisory
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html
Patch
Vendor Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*

Версия до 34.22.1163 (исключая)

cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*

Версия до 22.200 (исключая)

cpe:2.3:a:intel:uefi_firmware:*:*:*:*:*:*:*:*

Версия до 3.2.20.23023 (исключая)

cpe:2.3:h:intel:wi-fi_6_ax201:-:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

Конфигурация 3

cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00029

Низкий

8.2 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-693

NVD-CWE-Other

Связанные уязвимости

CVE-2022-46329

CVSS3: 8.2

redhat

почти 2 года назад

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

CVE-2022-46329

CVSS3: 8.2

debian

почти 2 года назад

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi so ...

GHSA-8r5h-8rgj-gp3x

CVSS3: 8.2

github

почти 2 года назад

Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

BDU:2023-05013

CVSS3: 8.2

fstec

почти 2 года назад

Уязвимость утилиты для подключения к сети Intel PROSet/Wireless WiFi и Killer WiFi, связанная с обходом авторизации посредством использования ключа, позволяющая нарушителю повысить свои привилегии

RLSA-2024:3178

rocky

около 1 месяца назад

Important: linux-firmware security update

EPSS

Процентиль: 6%

0.00029

Низкий

8.2 High

CVSS3

6.7 Medium

CVSS3

Дефекты

CWE-693

NVD-CWE-Other