Vulnerability · Published Aug 18, 2022 · Assigned by intel
CVE-2022-21225
High 8.0
In plain English
A high-severity security flaw in Intel(R) Data Center Manager software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 75% of all known vulnerabilities).
Severity (CVSS 3.1)8.0High
Exploit odds (30 days)1.5%top 25.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) Data Center Manager software | before version 4.1 |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00662.html
- 20221208 [CVE-2022-21225] Intel Data Center Manager Console <= 4.1 "getRoomRackData" Authenticated (Guest+) SQL Injection mailing-list
- http://packetstormsecurity.com/files/170180/Intel-Data-Center-Manager-4.1-SQL-Injection.html