Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
| AND |
|
History
06 Mar 2023, 18:44
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-427 | |
| References | (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html - Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:a:intel:administrative_tools_for_intel_network_adapters:*:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp_3.0:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_controller_e810-cam1:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_controller_e810-cam2:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp_3.0:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_controller_e810:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_controller_e810:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_controller_e810-xxvam2:-:*:*:*:*:*:*:* cpe:2.3:a:intel:non-volatile_memory_update_utility:*:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2_for_ocp_3.0:-:*:*:*:*:*:*:* cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda4:-:*:*:*:*:*:*:* |
17 Feb 2023, 12:52
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-16 21:15
Updated : 2024-02-04 23:14
NVD link : CVE-2022-41314
Mitre link : CVE-2022-41314
CVE.ORG link : CVE-2022-41314
JSON object : View
Products Affected
intel
- ethernet_network_adapter_e810-cqda1_for_ocp
- ethernet_network_adapter_e810-xxvda2_for_ocp_3.0
- ethernet_network_adapter_e810-cqda2
- ethernet_network_adapter_e810-xxvda2
- ethernet_network_controller_e810-xxvam2
- ethernet_network_adapter_e810-xxvda4
- non-volatile_memory_update_utility
- ethernet_network_controller_e810
- ethernet_network_adapter_e810-cqda2_for_ocp_3.0
- ethernet_network_controller_e810-cam1
- ethernet_controller_e810
- ethernet_network_controller_e810-cam2
- ethernet_network_adapter_e810-xxvda2_for_ocp
- ethernet_network_adapter_e810-cqda1_for_ocp_3.0
- administrative_tools_for_intel_network_adapters
- ethernet_network_adapter_e810-cqda1
CWE
CWE-427
Uncontrolled Search Path Element