CVE-2022-37410

CVSS 7 HIGHEPSS 0.2%CWE-284

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 7EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

16 May 2024Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · Intel(R) Thunderbolt driver software

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00916.html