CVE-2022-38076 : Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) W

Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially enable escalation of privilege via local access.

Published 2023-08-11 03:15:14

Updated 2023-10-24 18:03:18

Source Intel Corporation

View at NVD, CVE.org

Products affected by CVE-2022-38076

Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Intel » Proset/wireless Wifi
Versions before (<) 22.200
cpe:2.3:a:intel:proset\/wireless_wifi:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 3165 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 3168 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8260 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8265 » Version: N/A
When used together with: Intel » Killer Wireless-ac 1550 » Version: N/A
When used together with: Intel » Wireless-ac 9260 » Version: N/A
When used together with: Intel » Wireless-ac 9461 » Version: N/A
When used together with: Intel » Wireless-ac 9462 » Version: N/A
When used together with: Intel » Wireless-ac 9560 » Version: N/A
When used together with: Intel » Wireless 7265 (rev D) » Version: N/A
Intel » Killer
Versions before (<) 34.22.1163
cpe:2.3:a:intel:killer:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 3165 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 3168 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8260 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8265 » Version: N/A
When used together with: Intel » Killer Wireless-ac 1550 » Version: N/A
When used together with: Intel » Wireless-ac 9260 » Version: N/A
When used together with: Intel » Wireless-ac 9461 » Version: N/A
When used together with: Intel » Wireless-ac 9462 » Version: N/A
When used together with: Intel » Wireless-ac 9560 » Version: N/A
When used together with: Intel » Wireless 7265 (rev D) » Version: N/A
Intel » Uefi Firmware
Versions before (<) 3.2.20.23023
cpe:2.3:a:intel:uefi_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Intel » Dual Band Wireless-ac 3165 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 3168 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8260 » Version: N/A
When used together with: Intel » Dual Band Wireless-ac 8265 » Version: N/A
When used together with: Intel » Killer Wireless-ac 1550 » Version: N/A
When used together with: Intel » Wireless-ac 9260 » Version: N/A
When used together with: Intel » Wireless-ac 9461 » Version: N/A
When used together with: Intel » Wireless-ac 9462 » Version: N/A
When used together with: Intel » Wireless-ac 9560 » Version: N/A
When used together with: Intel » Wireless 7265 (rev D) » Version: N/A
Fedoraproject » Fedora » Version: 37
cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 38
cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 39
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-38076

EPSS FAQ

0.05%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 15 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-38076

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
3.8	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N	2.0	1.4	Intel Corporation
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Changed Confidentiality: None Integrity: Low Availability: None

References for CVE-2022-38076

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html

Access Denied
Patch;Vendor Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/K24OJT4AVMNND7LBTC2ZDDTE6DJHAKB4/

[SECURITY] Fedora 38 Update: linux-firmware-20230919-1.fc38 - package-announce - Fedora Mailing-Lists
Mailing List

CVEs referencing this url
https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html

[SECURITY] [DLA 3596-1] firmware-nonfree security update
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/

[SECURITY] Fedora 39 Update: linux-firmware-20230919-1.fc39 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y76A3PLHIQCEPESB4XVBV5SRRXQEZ5JY/

[SECURITY] Fedora 37 Update: linux-firmware-20230919-1.fc37 - package-announce - Fedora Mailing-Lists
Mailing List

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-38076

Products affected by CVE-2022-38076

Exploit prediction scoring system (EPSS) score for CVE-2022-38076

CVSS scores for CVE-2022-38076

References for CVE-2022-38076