CVE-2022-21225

Exploit

EPSS 0.31%
Veröffentlicht 18.08.2022 20:15:10
Zuletzt bearbeitet 05.05.2025 17:17:45
Quelle secure@intel.com
CVE-Watchlists
Login
Unerledigt
Login

Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Data Center Manager Version < 4.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.31%	0.539

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8	2.1	5.9	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	8	2.1	5.9	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

http://packetstormsecurity.com/files/170180/Intel-Data-Center-Manager-4.1-SQL-Injection.html

Third Party Advisory

Exploit

VDB Entry

http://seclists.org/fulldisclosure/2022/Dec/1

Third Party Advisory

Exploit

Mailing List

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-21225

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-21225

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-21225

EUVD