CVE-2022-40210

MEDIUM

Intel Data Center Manager < 5.0.1 - Exposure to Wrong Actor

Title source: rule

Description

Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

Scores

CVSS v3 6.8
EPSS 0.0007
EPSS Percentile 21.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Classification

CWE
CWE-488 CWE-668
Status published

Affected Products (1)

intel/data_center_manager < 5.0.1

Timeline

Published May 10, 2023
Tracked Since Feb 18, 2026