CVE-2022-43456

MEDIUM

Intel(R) RST <16.8.5.1014.5-19.5.2.1049.5 - Privilege Escalation

Title source: llm

Description

Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

[Vendor Advisory] http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00795.html

Scores

CVSS v3 6.7

EPSS 0.0005

EPSS Percentile 15.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-427 CWE-426

Status published

Products (1)

intel/rapid_storage_technology 16.0 - 16.8.5.1014.5

Published Aug 11, 2023

Tracked Since Feb 18, 2026