Lucene search

K
nvd[email protected]NVD:CVE-2022-38786
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2022-38786

2023-11-1419:15:12
CWE-284
web.nvd.nist.gov
2
intel battery life diagnostic tool
access control
vulnerability
escalation of privilege
local access
authenticated user
cve-2022-38786

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelbattery_life_diagnostic_toolRange<2.2.1
VendorProductVersionCPE
intelbattery_life_diagnostic_tool*cpe:2.3:a:intel:battery_life_diagnostic_tool:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2022-38786