CVE-2022-37409

MEDIUM

Intel Integrated Performance Primitiv... - Information Disclosure

Title source: rule
STIX 2.1

Description

Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

References (1)

Scores

CVSS v3 4.7
EPSS 0.0010
EPSS Percentile 27.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-691
Status published
Products (1)
intel/integrated_performance_primitives_cryptography < 2021.6
Published May 10, 2023
Tracked Since Feb 18, 2026