CVE-2022-40964

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

Loading…

Severity

Important

Red Hat Product Security

7.9

CVSS 3.1

Review impact separately from score.

Published · August 8, 2023

Updated · August 7, 2026

Description

An improper access control flaw was found in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software that may allow a privileged user to enable escalation of privilege via local access.

Statement

Please contact your OEM support group to obtain the correct driver version.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

UEFI firmware to version 3.2.20.23023 (includes versions 2.2.20.23023 and 1.2.20.23023)or later.

CVSS / CWE

CVSS 3.1 · 7.9
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H

CWE-284 · Improper Access Control