Main Vulnerability Database Vulnerabilities #VU72602

#VU72602 Insufficient Control Flow Management in Intel Battery Life Diagnostic Tool - CVE-2022-36278

Published: February 27, 2023

Vulnerability identifier: #VU72602

Vulnerability risk: Low

CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2022-36278

CWE-ID: CWE-691

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Intel Battery Life Diagnostic Tool

Software vendor:
Intel

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient control flow management, which leads to security restrictions bypass and privilege escalation.

Install updates from vendor's website.