CVE-2022-43456

MEDIUM

Intel(R) RST <16.8.5.1014.5-19.5.2.1049.5 - Privilege Escalation

Title source: llm

Description

Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.

References (1)

[Vendor Advisory] http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00795.html

Scores

CVSS v3 6.7

EPSS 0.0005

EPSS Percentile 15.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Classification

CWE

CWE-427 CWE-426

Status published

Affected Products (1)

intel/rapid_storage_technology < 16.8.5.1014.5

Timeline

Published Aug 11, 2023

Tracked Since Feb 18, 2026