PT-2023-4606 · Intel+5 · Killer Wifi+6

Published 2023-08-08 · Updated 2024-08-20 · CVE-2022-46329

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) PROSet/Wireless WiFi software (affected versions not specified) Killer(TM) WiFi software (affected versions not specified)

Description The issue is related to a protection mechanism failure in Intel(R) PROSet/Wireless WiFi software, which may allow a privileged user to potentially enable escalation of privilege via local access. This can be exploited by using a key to bypass authorization.

Recommendations For Intel(R) PROSet/Wireless WiFi software, consider restricting local access to minimize the risk of exploitation until a patch is available. For Killer(TM) WiFi software, restrict local access to prevent potential privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

ALSA-2023:6595

ALSA-2024:3178

BDU:2023-05013

CESA-2024_3178

CVE-2022-46329

DLA-3596-1

INFSA-2024_3178

RHSA-2023:6595

RHSA-2023_6595

RHSA-2024:0449

RHSA-2024:0577

RHSA-2024:1112

RHSA-2024:2583

RHSA-2024:3178

RHSA-2024:3422

RHSA-2024:3939

RHSA-2024:4575

RHSA-2024_3178

RHSA-2024_3939

Affected Products

Almalinux

Centos

Debian

Intel Proset/Wireless Wifi

Killer Wifi

Red Hat

Rocky Linux

References · 39

• https://osv.dev/vulnerability/ALSA-2024:3178 · Vendor Advisory
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-46329 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-3178.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-46329 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY · Vendor Advisory
• https://errata.almalinux.org/9/ALSA-2023-6595.html · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-46329 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-46329 · Security Note
• https://osv.dev/vulnerability/ALSA-2023:6595 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46329 · Security Note
• https://osv.dev/vulnerability/DLA-3596-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05013 · Security Note