CVE-2022-24378

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-665

Affected software

No affected versions have been published.

Timeline

Published
Aug 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-243796.7Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user tCVE-2022-24387.2The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up toCVE-2022-243817.5All versions of package asneg/opcuastack are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chuCVE-2022-243826.7Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via lCVE-2022-243837.8The affected product is vulnerable to an out-of-bounds read, which may result in code executionCVE-2022-243846.1Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.CVE-2022-243856.5A Direct Object Access vulnerability in SmarterTools SmarterTrack leads to information disclosure This issue affects: SmarterTools SmarterTrCVE-2022-243866.1Stored XSS in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.CVE-2022-243877.2With administrator or admin privileges the application can be tricked into overwriting files in app_data/Config folder, e.g. the systemsettiCVE-2022-243888.8Vulnerability in rconfig “date” enables an attacker with user level access to the CLI to inject root level commands into Fidelis Network andCVE-2022-243898.8Vulnerability in rconfig “cert_utils” enables an attacker with user level access to the CLI to inject root level commands into Fidelis NetwoCVE-2022-24397.2The Easy Digital Downloads – Simple eCommerce for Selling Digital Files plugin for WordPress is vulnerable to deserialization of untrusted i
CVE-2022-24378: Medium severity, CVSS 5.5 | Vulnix