{"id":"CVE-2022-41610","state":"PUBLISHED","title":"Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable den","description":"Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.","publishedAt":"2023-05-10T13:17:23.402Z","updatedAt":"2025-01-27T17:58:41.506Z","severity":{"score":5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) EMA Configuration Tool"],"affected":[{"vendor":"n/a","product":"Intel(R) EMA Configuration Tool","defaultStatus":"unaffected","versions":[{"version":"before version 1.0.4 and Intel(R) MC before version 2.4 software","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html"],"weaknesses":["CWE-285"],"ingestedAt":"2026-10-29T19:50:37.819Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/41xxx/CVE-2022-41610.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-41610","state":"PUBLISHED","datePublished":"2023-05-10T13:17:23.402Z","dateUpdated":"2025-01-27T17:58:41.506Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-11-07T04:00:03.867Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) EMA Configuration Tool","defaultStatus":"unaffected","versions":[{"version":"before version 1.0.4 and Intel(R) MC before version 2.4 software","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"},{"cweId":"CWE-285","lang":"en","description":"Improper authorization","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-05-10T13:17:23.402Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00808.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T12:49:43.577Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:25:53.348754Z","id":"CVE-2022-41610","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T17:58:41.506Z"}}]}}}