PT-2023-13005 · Intel · Intel Integrated Sensor Solution

Jeremy Boone · Publicado 2023-02-16 · Atualizado 2023-03-06 · CVE-2022-30339

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Integrated Sensor Solution versions prior to 5.4.2.4579v3 Intel(R) Integrated Sensor Solution versions prior to 5.4.1.4479 Intel(R) Integrated Sensor Solution versions prior to 5.0.0.4143

Description The issue is an out-of-bounds read in the firmware for the Intel(R) Integrated Sensor Solution. This may allow a privileged user to potentially enable denial of service via local access.

Recommendations For versions prior to 5.4.2.4579v3, update to version 5.4.2.4579v3 or later. For versions prior to 5.4.1.4479, update to version 5.4.1.4479 or later. For versions prior to 5.0.0.4143, update to version 5.0.0.4143 or later.

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-125

Identificadores relacionados

CVE-2022-30339

Produtos afetados

Intel Integrated Sensor Solution

Referências · 6

• https://osv.dev/vulnerability/CVE-2022-30339 · Aviso do Fabricante
• https://t.me/cvenotify/44508 · Publicação no Telegram
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html · Aviso do Fabricante
• https://t.me/cvenotify/45621 · Publicação no Telegram
• https://t.me/cibsecurity/58350 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-30339 · Nota de Segurança