SB2023051128 - Multiple vulnerabilities in Intel DCM Software

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2023051128

SB2023051128 - Multiple vulnerabilities in Intel DCM Software

Published: May 11, 2023

Security Bulletin ID SB2023051128
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Medium 50% Low 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Permissions, Privileges, and Access Controls (CVE-ID: CVE-2022-40210)

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to exposure of data element to wrong session, which leads to security restrictions bypass and privilege escalation.


2) Insufficiently protected credentials (CVE-ID: CVE-2022-40685)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to insufficiently protected credentials. A remote user can gain unauthorized access to sensitive information on the system.


Remediation

Install update from vendor's website.

References