PT-2023-13005 · Intel · Intel Integrated Sensor Solution

Jeremy Boone · Published 2023-02-16 · Updated 2023-03-06 · CVE-2022-30339

Positive Technologies (AI Summary)

CVSS v3.1

6.0

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Integrated Sensor Solution versions prior to 5.4.2.4579v3 Intel(R) Integrated Sensor Solution versions prior to 5.4.1.4479 Intel(R) Integrated Sensor Solution versions prior to 5.0.0.4143

Description The issue is an out-of-bounds read in the firmware for the Intel(R) Integrated Sensor Solution. This may allow a privileged user to potentially enable denial of service via local access.

Recommendations For versions prior to 5.4.2.4579v3, update to version 5.4.2.4579v3 or later. For versions prior to 5.4.1.4479, update to version 5.4.1.4479 or later. For versions prior to 5.0.0.4143, update to version 5.0.0.4143 or later.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-30339

Affected Products

Intel Integrated Sensor Solution

References · 6

• https://osv.dev/vulnerability/CVE-2022-30339 · Vendor Advisory
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30339 · Security Note
• https://t.me/cvenotify/44508 · Telegram Post
• https://t.me/cvenotify/45621 · Telegram Post
• https://t.me/cibsecurity/58350 · Telegram Post