CVE-2022-25999

{"id": "CVE-2022-25999", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2022-08-18T20:15:10.823", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00672.html", "tags": ["Mitigation", "Vendor Advisory"], "source": "secure@intel.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-427"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "Un elemento de ruta de b\u00fasqueda no controlado en el software Intel(R) Enpirion(R) Digital Power Configurator GUI, todas las versiones puede permitir que un usuario autenticado permita potencialmente una escalada de privilegios por medio de acceso local."}], "lastModified": "2022-08-22T16:13:53.037", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:intel:enpirion_digital_power_configurator_gui:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A46433E7-ADA0-4097-9072-E5164EA5FEED"}], "operator": "OR"}]}], "sourceIdentifier": "secure@intel.com"}