CVE-2022-37409

MEDIUM

Intel Integrated Performance Primitives Cryptography < 2021.6 - Authenticated Information Disclosure via Local Access

Title source: llm
STIX 2.1

Description

Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

References (1)

Core 1

Scores

CVSS v3 4.7
EPSS 0.0017
EPSS Percentile 6.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-691
Status published
Products (1)
intel/integrated_performance_primitives_cryptography < 2021.6
Published May 10, 2023
Tracked Since Feb 18, 2026