CVE-2022-41314 - Vulnerability Details

Vendors	Products
Intel	Administrative Tools For Intel Network Adapters Ethernet Controller E810 Ethernet Network Adapter E810-cqda1 Ethernet Network Adapter E810-cqda1 For Ocp Ethernet Network Adapter E810-cqda1 For Ocp 3.0 Ethernet Network Adapter E810-cqda2 Ethernet Network Adapter E810-cqda2 For Ocp 3.0 Ethernet Network Adapter E810-xxvda2 Ethernet Network Adapter E810-xxvda2 For Ocp Ethernet Network Adapter E810-xxvda2 For Ocp 3.0 Ethernet Network Adapter E810-xxvda4 Ethernet Network Controller E810 Ethernet Network Controller E810-cam1 Ethernet Network Controller E810-cam2 Ethernet Network Controller E810-xxvam2 Non-volatile Memory Update Utility

Link	Providers
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2022-41314", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "state": "PUBLISHED", "assignerShortName": "intel", "dateReserved": "2022-09-27T00:28:29.127Z", "datePublished": "2023-02-16T20:00:30.335Z", "dateUpdated": "2025-01-27T18:12:28.041Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2023-02-16T20:00:30.335Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) Network Adapter installer software", "versions": [{"version": "See references", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access."}], "references": [{"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 6.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:42:46.124Z"}, "title": "CVE Program Container", "references": [{"name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-01-27T17:29:05.448644Z", "id": "CVE-2022-41314", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T18:12:28.041Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2022-41314 (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

state : PUBLISHED (string)

assignerShortName : intel (string)

dateReserved : 2022-09-27T00:28:29.127Z (string)

datePublished : 2023-02-16T20:00:30.335Z (string)

dateUpdated : 2025-01-27T18:12:28.041Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2023-02-16T20:00:30.335Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) Network Adapter installer software (string)

versions : [ »

0 : { »

version : See references (string)

status : affected (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

references : [ »

0 : { »

name : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

attackVector : LOCAL (string)

attackComplexity : HIGH (string)

privilegesRequired : LOW (string)

userInteraction : REQUIRED (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T12:42:46.124Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-01-27T17:29:05.448644Z (string)

id : CVE-2022-41314 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-27T18:12:28.041Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T12:42:46.124Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2022-41314", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-01-27T17:29:05.448644Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-01-27T17:29:07.755Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) Network Adapter installer software", "versions": [{"status": "affected", "version": "See references"}], "defaultStatus": "unaffected"}], "references": [{"url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html", "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}]}], "providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2023-02-16T20:00:30.335Z"}}}, "cveMetadata": {"cveId": "CVE-2022-41314", "state": "PUBLISHED", "dateUpdated": "2025-01-27T18:12:28.041Z", "dateReserved": "2022-09-27T00:28:29.127Z", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "datePublished": "2023-02-16T20:00:30.335Z", "assignerShortName": "intel"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

name : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T12:42:46.124Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-41314 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-01-27T17:29:05.448644Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-01-27T17:29:07.755Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.7 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : HIGH (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : HIGH (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) Network Adapter installer software (string)

versions : [ »

0 : { »

status : affected (string)

version : See references (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

name : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

]

}

]

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2023-02-16T20:00:30.335Z (string)

}

cveMetadata : { »

cveId : CVE-2022-41314 (string)

state : PUBLISHED (string)

dateUpdated : 2025-01-27T18:12:28.041Z (string)

dateReserved : 2022-09-27T00:28:29.127Z (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

datePublished : 2023-02-16T20:00:30.335Z (string)

assignerShortName : intel (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:administrative_tools_for_intel_network_adapters:*:*:*:*:*:*:*:*", "matchCriteriaId": "DCACAA3E-0515-4A2E-BD94-57B549640878", "versionEndExcluding": "27.3", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:intel:non-volatile_memory_update_utility:*:*:*:*:*:*:*:*", "matchCriteriaId": "6E312868-99F3-488E-B03F-A9291D93798A", "versionEndExcluding": "4.01", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:ethernet_controller_e810:-:*:*:*:*:*:*:*", "matchCriteriaId": "FAAF14CD-89F6-49F3-8E74-3EE0535D8513", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1:-:*:*:*:*:*:*:*", "matchCriteriaId": "87F3AB90-46C3-48DD-B0B4-4E036712ECCB", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp:-:*:*:*:*:*:*:*", "matchCriteriaId": "86F81244-F28E-416A-B3B6-7A1F79D8AC73", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp_3.0:-:*:*:*:*:*:*:*", "matchCriteriaId": "F06D5B95-4DD0-4BEB-A32A-AAE300046670", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2:-:*:*:*:*:*:*:*", "matchCriteriaId": "D582770B-4CCD-43A4-B218-FFD9AE530A24", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2_for_ocp_3.0:-:*:*:*:*:*:*:*", "matchCriteriaId": "CA63976A-922C-4E50-8D69-D7F6A62AD31E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2:-:*:*:*:*:*:*:*", "matchCriteriaId": "4E006D87-BC0F-485E-931D-789221B9D876", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D255A8A-BB76-4F8E-9E44-3F391AA16CE3", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp_3.0:-:*:*:*:*:*:*:*", "matchCriteriaId": "31F0C290-6882-49EB-B89A-9CFCC1A4BEEA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda4:-:*:*:*:*:*:*:*", "matchCriteriaId": "DA0F1118-C181-42B4-B3C4-A5AE9F59654E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_controller_e810:-:*:*:*:*:*:*:*", "matchCriteriaId": "CD53D7BD-4119-4221-8A83-1268F3CA715E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_controller_e810-cam1:-:*:*:*:*:*:*:*", "matchCriteriaId": "839854C2-8442-4EB8-8FE0-434FEAD3B559", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_controller_e810-cam2:-:*:*:*:*:*:*:*", "matchCriteriaId": "42E8F0FF-94C1-4AB5-A9D3-D2963A2200F3", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:ethernet_network_controller_e810-xxvam2:-:*:*:*:*:*:*:*", "matchCriteriaId": "AFC7B304-7705-40F7-A357-5F7E8FD71E47", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access."}], "id": "CVE-2022-41314", "lastModified": "2024-11-21T07:23:01.657", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@intel.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-02-16T21:15:13.823", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:intel:administrative_tools_for_intel_network_adapters:*:*:*:*:*:*:*:* (string)

matchCriteriaId : DCACAA3E-0515-4A2E-BD94-57B549640878 (string)

versionEndExcluding : 27.3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:intel:non-volatile_memory_update_utility:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E312868-99F3-488E-B03F-A9291D93798A (string)

versionEndExcluding : 4.01 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:ethernet_controller_e810:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FAAF14CD-89F6-49F3-8E74-3EE0535D8513 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 87F3AB90-46C3-48DD-B0B4-4E036712ECCB (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 86F81244-F28E-416A-B3B6-7A1F79D8AC73 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda1_for_ocp_3.0:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F06D5B95-4DD0-4BEB-A32A-AAE300046670 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : D582770B-4CCD-43A4-B218-FFD9AE530A24 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-cqda2_for_ocp_3.0:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CA63976A-922C-4E50-8D69-D7F6A62AD31E (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E006D87-BC0F-485E-931D-789221B9D876 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D255A8A-BB76-4F8E-9E44-3F391AA16CE3 (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda2_for_ocp_3.0:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 31F0C290-6882-49EB-B89A-9CFCC1A4BEEA (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:intel:ethernet_network_adapter_e810-xxvda4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DA0F1118-C181-42B4-B3C4-A5AE9F59654E (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:intel:ethernet_network_controller_e810:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CD53D7BD-4119-4221-8A83-1268F3CA715E (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:intel:ethernet_network_controller_e810-cam1:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 839854C2-8442-4EB8-8FE0-434FEAD3B559 (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:intel:ethernet_network_controller_e810-cam2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 42E8F0FF-94C1-4AB5-A9D3-D2963A2200F3 (string)

vulnerable : false (boolean)

}

13 : { »

criteria : cpe:2.3:h:intel:ethernet_network_controller_e810-xxvam2:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AFC7B304-7705-40F7-A357-5F7E8FD71E47 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access. (string)

}

]

id : CVE-2022-41314 (string)

lastModified : 2024-11-21T07:23:01.657 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : HIGH (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : secure@intel.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-02-16T21:15:13.823 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-427 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object