CVE-2022-30548

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	Intel(R) Glorp software	See references

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00673.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00673.htmlVendor Advisory

Timeline

Published: Nov 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-305497.8Out-of-bounds read vulnerability exists in V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, which may allow an attack CVE-2022-30558.8Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI CVE-2022-305508.8An issue was discovered in the auth component in Dovecot 2.2 and 2.3 before 2.3.20. When two passdb configuration entries exist with the sam CVE-2022-305517.5OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that CVE-2022-305525.5Das U-Boot 2022.01 has a Buffer Overflow.CVE-2022-305567.5Apache HTTP Server 2.4.53 and earlier may return lengths to applications calling r:wsread() that point past the end of the storage allocated CVE-2022-305577.5Foxit PDF Reader and PDF Editor before 11.2.2 have a Type Confusion issue that causes a crash because of Unsigned32 mishandling during JavaS CVE-2022-30566.5Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to bypass conte CVE-2022-305607.4When an attacker obtaining the administrative account and password, or through a man-in-the-middle attack, the attacker could send a specifi CVE-2022-305615.9When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in, the attacker could log in to the devi CVE-2022-305624.7If the user enables the https function on the device, an attacker can modify the user’s request data packet through a man-in-the-middle atta CVE-2022-305637.4When an attacker uses a man-in-the-middle attack to sniff the request packets with success logging in through ONVIF, he can log in to the de