Lucene search

IntelCVELIST:CVE-2022-26508

HistoryNov 11, 2022 - 3:48 p.m.

CVE-2022-26508

2022-11-1115:48:40

intel

www.cve.org

intel sdp tool

improper authentication

information disclosure

network access

cve-2022-26508

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

51.7%

JSON

Improper authentication in the Intel® SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) SDP Tool",
    "versions": [
      {
        "version": "before version 3.0.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00710.html

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

51.7%

JSON

Related for CVELIST:CVE-2022-26508