PT-2023-4493 · Intel+4 · Killer Wifi+5

Publicado 2023-08-08 · Atualizado 2024-06-17 · CVE-2022-38076

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi (affected versions not specified)

Description The issue is related to insufficient input validation in the Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

ALSA-2023:6595

BDU:2023-04889

CVE-2022-38076

DLA-3596-1

RHSA-2023:6595

RHSA-2023_6595

RHSA-2024:3939

RHSA-2024_3939

Produtos afetados

Almalinux

Astra Linux

Debian

Intel Proset/Wireless Wifi

Killer Wifi

Red Hat

Referências · 40

• https://bugzilla.redhat.com/2238960 · Nota
• https://security-tracker.debian.org/tracker/CVE-2022-38076 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2022-36351 · Nota
• https://access.redhat.com/security/cve/CVE-2022-46329 · Nota
• https://osv.dev/vulnerability/BELL-CVE-2022-38076 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2022-38076 · Nota de Segurança
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-0830SE17 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2022-27635 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-38076 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-04889 · Nota de Segurança
• https://bugzilla.redhat.com/2238964 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27635 · Nota
• https://access.redhat.com/errata/RHSA-2023:6595 · Nota
• https://t.me/cvenotify/58820 · Publicação no Telegram
• https://access.redhat.com/security/cve/CVE-2022-38076 · Nota