Lucene search

K
cveIntelCVE-2022-26374
HistoryAug 18, 2022 - 8:15 p.m.

CVE-2022-26374

2022-08-1820:15:11
CWE-427
intel
web.nvd.nist.gov
40
4
cve-2022-26374
uncontrolled search path
installation binaries
intel
seapi
privilege escalation
nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

12.6%

Uncontrolled search path in the installation binaries for Intel® SEAPI all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelsingle_event_api
VendorProductVersionCPE
intelsingle_event_api*cpe:2.3:a:intel:single_event_api:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "product": "version",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ]
  }
]

Social References

More

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVE-2022-26374