CVE-2022-43666

EPSS 0.22%
Veröffentlicht 14.11.2023 19:15:14
Zuletzt bearbeitet 21.11.2024 07:27:00
Erkennungen
Login

Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Unison Software Version < 20.14.5683.0

Microsoft ≫ Windows Version -

Intel ≫ Unison Software Version < 20.14.4244

Google ≫ Android Version -

Intel ≫ Unison Software Version < 20.14.2.3053

Apple ≫ iPhone OS Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.22%	0.118

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Intel	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-1258 Exposure of Sensitive System Information Due to Uncleared Debug Information

The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00963.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-43666

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-43666

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-43666

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2022-43666