CVE-2022-27638
Last modified
CVE-2022-27638 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.16% chance of exploitation in the next 30 days.
Description
Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition software before version 22.1.1 STD may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Advanced Link Analyzer | < 22.1.1 |
| Intel | Advanced Link Analyzer | < 22.2 |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00715.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-27638?
How severe is CVE-2022-27638?
How do I fix CVE-2022-27638?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-27632Cross-site request forgery (CSRF) vulnerability in Rebooter(…8.8
- CVE-2022-27633An information disclosure vulnerability exists in the confct…7.5
- CVE-2022-27634On 16.1.x versions prior to 16.1.2.2 and 15.1.x versions pri…7.2
- CVE-2022-27635Improper access control for some Intel(R) PROSet/Wireless Wi…6.7
- CVE-2022-27636On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x v…5.5
- CVE-2022-27637Reflected cross-site scripting vulnerability in PukiWiki ver…6.1
- CVE-2022-27639Incomplete cleanup in some Intel(R) XMM(TM) 7560 Modem softw…8.4
- CVE-2022-2764A flaw was found in Undertow. Denial of service can be achie…4.9
- CVE-2022-27640A vulnerability has been identified in SIMATIC CP 442-1 RNA …6.5
- CVE-2022-27641This vulnerability allows network-adjacent attackers to exec…8.8
- CVE-2022-27642This vulnerability allows network-adjacent attackers to bypa…8.8
- CVE-2022-27643This vulnerability allows network-adjacent attackers to exec…8.8
Are you affected by CVE-2022-27638?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST