PT-2023-13771 · Intel · Intel Dcm

Alexander V Gutkin + 1 · Published 2023-05-10 · Updated 2023-05-18 · CVE-2022-40210

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel DCM software versions prior to 5.0.1

Description The issue concerns the exposure of a data element to the wrong session, potentially allowing an authenticated user to escalate privileges via local access.

Recommendations For versions prior to 5.0.1, update to version 5.0.1 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

CWE-488

Related Identifiers

CVE-2022-40210

Affected Products

Intel Dcm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-40210 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40210 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html · Vendor Advisory
• https://t.me/cvenotify/50748 · Telegram Post
• https://t.me/cvenotify/50137 · Telegram Post