Protection Mechanism Failure in Intel Wi-Fi 6 AX201 - CVE-2022-46329

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU79525

Protection Mechanism Failure in Intel Wi-Fi 6 AX201 - CVE-2022-46329

Published: August 15, 2023


Vulnerability identifier: #VU79525
CSH Severity: Low
CVSS v4: 4.6 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-46329
CWE-ID: CWE-693
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to bypass implemented security restrictions.

The vulnerability exists due to insufficient implementation of security measures. A local user can bypass implemented security restrictions and elevate privileges on the system.


Affected software

Intel Wi-Fi 6 AX201
Oracle Linux
Anolis OS
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Fedora
Red Hat OpenShift Container Platform
Juniper Secure Analytics (JSA)
IBM Qradar SIEM
Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
iwl5150-firmware
iwl5000-firmware
iwl6000-firmware
iwl3945-firmware
iwl2000-firmware
iwl135-firmware
iwl105-firmware
iwl2030-firmware
iwl6000g2a-firmware
iwl6000g2b-firmware
iwl7260-firmware
iwl3160-firmware
iwl100-firmware
iwl1000-firmware
iwl6050-firmware
iwl4965-firmware
linux-firmware
linux-firmware (Red Hat package)
libertas-sd8787-firmware
libertas-usb8388-firmware
libertas-sd8686-firmware
libertas-usb8388-olpc-firmware
IBM QRadar Incident Forensics
IBM Power Hardware Management Console (HMC)

How to mitigate CVE-2022-46329

Install updates from vendor's website.

Intel Wi-Fi 6 AX201 - update to 22.200
Red Hat OpenShift Container Platform - update to 4.11.59
Juniper Secure Analytics (JSA) - update to 7.5.0 UP8 IF03
IBM Qradar SIEM - addressed in versions 7.5.0 Update Pack 8 IF01, 7.5.0 Update Pack 10
IBM QRadar Incident Forensics - update to 7.5.0.10
iwl5150-firmware - addressed in versions 8.24.2.2-83, 8.24.2.2-121
iwl5000-firmware - addressed in versions 8.83.5.1_1-83, 8.83.5.1_1-121
iwl6000-firmware - addressed in versions 9.221.4.1-83, 9.221.4.1-121
IBM Power Hardware Management Console (HMC) - addressed in versions 10.2.1040.0 SP3, 10.3.1060.0 SP1
iwl3945-firmware - addressed in versions 15.32.2.9-83, 15.32.2.9-121
iwl2000-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl135-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl105-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl2030-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl6000g2a-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl6000g2b-firmware - addressed in versions 18.168.6.1-83, 18.168.6.1-121
iwl7260-firmware - addressed in versions 25.30.13.0-83, 25.30.13.0-121
iwl3160-firmware - addressed in versions 25.30.13.0-83, 25.30.13.0-121
iwl100-firmware - addressed in versions 39.31.5.1-83, 39.31.5.1-121
iwl1000-firmware - addressed in versions 39.31.5.1-83, 39.31.5.1-121
iwl6050-firmware - addressed in versions 41.28.5.1-83, 41.28.5.1-121
iwl4965-firmware - addressed in versions 228.61.2.24-83, 228.61.2.24-121
linux-firmware - addressed in versions 20200421-83.git78c0348, 20240111-121.gitb3132c18
linux-firmware (Red Hat package) - addressed in versions 20200421-83.git78c0348.el7_9, 20201218-106.git05789708.el8_4, 20220209-130.el9_0, 20220210-114.git6342082c.el8_6, 20230404-118.git2e92a49f.el8_8, 20230814-140.el9_3, 20240111-121.gitb3132c18.el8, 20240419-102.git055dfa8e.el8_2
linux-firmware - addressed in versions 20230919-1.fc37, 20230919-1.fc38, 20230919-1.fc39
libertas-sd8787-firmware - update to 20240111-121.gitb3132c18
libertas-usb8388-firmware - update to 20240111-121.gitb3132c18
libertas-sd8686-firmware - update to 20240111-121.gitb3132c18
libertas-usb8388-olpc-firmware - update to 20240111-121.gitb3132c18

External References

Related Security Bulletins