{"id":"CVE-2022-27808","state":"PUBLISHED","title":"Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potenti","description":"Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-02-16T20:00:27.113Z","updatedAt":"2025-01-27T18:13:27.999Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","source":"intel"},"assigner":"intel","products":["n/a Intel(R) Ethernet Controller Administrative Tools drivers for Windows"],"affected":[{"vendor":"n/a","product":"Intel(R) Ethernet Controller Administrative Tools drivers for Windows","defaultStatus":"unaffected","versions":[{"version":"before version 1.5.0.2","status":"affected"}]}],"references":["http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"],"weaknesses":[],"ingestedAt":"2026-10-29T19:49:52.117Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/27xxx/CVE-2022-27808.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-27808","state":"PUBLISHED","datePublished":"2023-02-16T20:00:27.113Z","dateUpdated":"2025-01-27T18:13:27.999Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-05-11T04:14:45.508Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insufficient control flow management in some Intel(R) Ethernet Controller Administrative Tools drivers for Windows before version 1.5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) Ethernet Controller Administrative Tools drivers for Windows","defaultStatus":"unaffected","versions":[{"version":"before version 1.5.0.2","status":"affected"}]}],"references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"LOW"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-02-16T20:00:27.113Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html","name":"http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T05:32:59.968Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:27:41.476282Z","id":"CVE-2022-27808","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T18:13:27.999Z"}}]}}}