Lucene search

IntelCVE-2022-38973

HistoryAug 11, 2023 - 3:15 a.m.

CVE-2022-38973

2023-08-1103:15:14

CWE-284

intel

web.nvd.nist.gov

cve-2022-38973

intel

arc

graphics cards

access control

denial of service

information disclosure

nvd

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper access control for some Intel® Arc™ graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access.

Affected configurations

Nvd

Node

intelarc_a750_firmwareMatch-

AND

intelarc_a750Match-

Node

intelarc_a770_firmwareMatch-

AND

intelarc_a770Match-

VendorProductVersionCPE
intelarc_a750_firmware-cpe:2.3:o:intel:arc_a750_firmware:-:*:*:*:*:*:*:*
intelarc_a750-cpe:2.3:h:intel:arc_a750:-:*:*:*:*:*:*:*
intelarc_a770_firmware-cpe:2.3:o:intel:arc_a770_firmware:-:*:*:*:*:*:*:*
intelarc_a770-cpe:2.3:h:intel:arc_a770:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	arc_a750_firmware	-	cpe:2.3:o:intel:arc_a750_firmware:-:::::::*
intel	arc_a750	-	cpe:2.3:h:intel:arc_a750:-:::::::*
intel	arc_a770_firmware	-	cpe:2.3:o:intel:arc_a770_firmware:-:::::::*
intel	arc_a770	-	cpe:2.3:h:intel:arc_a770:-:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition",
    "versions": [
      {
        "version": "sold between October of 2022 and December of 2022",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2022-38973