PT-2023-13890 · Intel · Intel Dcm

Julien Ahrens · Published 2023-05-10 · Updated 2023-05-18 · CVE-2022-40685

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel(R) DCM software versions prior to 5.0.1

Description The issue concerns insufficiently protected credentials in the Intel(R) DCM software, which may allow an authenticated user to potentially enable information disclosure via network access.

Recommendations For versions prior to 5.0.1, update to version 5.0.1 or later to resolve the issue.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2022-40685

Affected Products

Intel Dcm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-40685 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40685 · Vendor Advisory
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html · Vendor Advisory
• https://t.me/cibsecurity/63799 · Telegram Post
• https://t.me/cvenotify/50747 · Telegram Post