CVE-2022-33963
Last modified
CVE-2022-33963 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Unite | < 4.2.34870 |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00782.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00782.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-33963?
How severe is CVE-2022-33963?
How do I fix CVE-2022-33963?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-33955IBM CICS TX 11.1 could allow allow an attacker with physical…6.8
- CVE-2022-33959IBM Sterling Order Management 10.0 could allow a user to byp…8.1
- CVE-2022-3396OMRON CX-Programmer 9.78 and prior is vulnerable to an Out-o…9.8
- CVE-2022-33960Multiple Authenticated (subscriber or higher user role) SQL …8.8
- CVE-2022-33961Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabili…4.8
- CVE-2022-33962In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.…6.7
- CVE-2022-33964Improper input validation in the Intel(R) SUR software befor…9.8
- CVE-2022-33965Multiple Unauthenticated SQL Injection (SQLi) vulnerabilitie…9.8
- CVE-2022-33966Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2022-33967squashfs filesystem implementation of U-Boot versions from v…7.8
- CVE-2022-33968In BIG-IP Versions 17.0.x before 17.0.0.1, 16.1.x before 16.…4.9
- CVE-2022-33969Authenticated WordPress Options Change vulnerability in Bipl…7.2
Are you affected by CVE-2022-33963?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST