{"id":"CVE-2022-43474","state":"PUBLISHED","title":"Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation ","description":"Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-05-10T13:17:23.916Z","updatedAt":"2025-01-27T17:58:34.191Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a DSP Builder software installer for Intel(R) FPGAs Pro Edition"],"affected":[{"vendor":"n/a","product":"DSP Builder software installer for Intel(R) FPGAs Pro Edition","defaultStatus":"unaffected","versions":[{"version":"before version 22.4","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T19:50:43.581Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/43xxx/CVE-2022-43474.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-43474","state":"PUBLISHED","datePublished":"2023-05-10T13:17:23.916Z","dateUpdated":"2025-01-27T17:58:34.191Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2022-12-07T04:00:07.281Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"DSP Builder software installer for Intel(R) FPGAs Pro Edition","defaultStatus":"unaffected","versions":[{"version":"before version 22.4","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"},{"cweId":"CWE-427","lang":"en","description":"Uncontrolled search path","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-05-10T13:17:23.916Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T13:32:59.640Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-27T17:26:56.889910Z","id":"CVE-2022-43474","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-27T17:58:34.191Z"}}]}}}