PT-2023-13668 · Intel · Intel Arc A770+1

Published 2023-08-10 · Updated 2023-09-06 · CVE-2022-38973

Positive Technologies (AI Summary)

CVSS v3.1

3.3

Low

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition versions sold between October 2022 and December 2022

Description The issue is related to improper access control, which may allow an authenticated user to potentially enable denial of service or information disclosure via local access. This affects Intel(R) Arc(TM) graphics cards A770 and A750 sold between October of 2022 and December of 2022.

Recommendations For Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition versions sold between October 2022 and December 2022, consider restricting local access to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-38973

Affected Products

Intel Arc A750

Intel Arc A770

References · 8

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-38973 · Security Note
• https://t.me/cvenotify/57000 · Telegram Post
• https://t.me/cvenotify/56234 · Telegram Post
• https://t.me/cibsecurity/68315 · Telegram Post
• https://twitter.com/CVEnew/status/1690264602993418240 · Twitter Post
• https://twitter.com/hkepcmedia/status/1690615243800801280 · Twitter Post
• https://twitter.com/mark_a_figueroa/status/1689876821079126016 · Twitter Post