Skip to main content

Advisor CVE-2022-21128

HIGH
2022-05-12 secure@intel.com
Privilege Escalation Intel Advisor
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 12, 2022 - 17:15 nvd
HIGH 7.8

DescriptionNVD

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access.

AnalysisAI

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access. Affected products include: Intel Advisor. Version information: version 7.6.0.37.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Advisor

View all
CVE-2023-1767 MEDIUM POC
5.4 Apr 20

The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. Rated mediu
CVE-2024-21772 HIGH
7.8 May 16

Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pote
CVE-2023-24592 HIGH
7.8 Nov 14

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated
CVE-2023-22355 HIGH
7.8 May 10

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may

CVE-2017-5682 HIGH
7.3 Feb 28

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel In
CVE-2023-27383 MEDIUM
6.8 Nov 14

Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version

CVE-2024-39284 MEDIUM
5.4 Feb 12

Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to pot
CVE-2025-20079 MEDIUM
5.4 May 13

Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escala
CVE-2024-26025 MEDIUM
5.4 Aug 14

Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user t

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2022-21128 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy