MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2022-29508

CVSS 6.3v3.1pub. 2023-05-10upd. 2024-11-21

Null pointer dereference in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

  • Intel Virtual Raid On Cpu

    APP
    Intel
    < 7.7.6.1003
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-45112HIGH7.3ten sam produkt

Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated us...

CVE-2022-29919HIGH7.8ten sam produkt

Use after free in the Intel(R) VROC software before version 7.7.6.1003 may allow an authenticated user to pote...

CVE-2024-29079MEDIUM6.9ten sam produkt

Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an aut...

CVE-2024-23489MEDIUM5.4ten sam produkt

Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated ...

CVE-2023-32646MEDIUM6.7ten sam produkt

Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authent...