CVEvulnerability

CVE-2022-41784

7.8 HIGH Published 2023-05-10 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-10
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-284

Description

Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access

Affected configurations

• intel one boot flash update (< 14.1.30)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References