CVE-2022-31476

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published
Feb 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-314774.4Improper initialization for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via locCVE-2022-314784.3The UserTakeOver plugin before 4.0.1 for ILIAS allows an attacker to list all users via the search function.CVE-2022-314799.8An unauthenticated attacker can update the hostname with a specially crafted name that will allow for shell commands to be executed during tCVE-2022-31486.1Cross-site Scripting (XSS) - Generic in GitHub repository jgraph/drawio prior to 20.3.0.CVE-2022-314807.5An unauthenticated attacker could arbitrarily upload firmware files to the target device, ultimately causing a Denial-of-Service (DoS). ThisCVE-2022-3148110.0An unauthenticated attacker can send a specially crafted update file to the device that can overflow a buffer. This vulnerability impacts prCVE-2022-314827.5An unauthenticated attacker can send a specially crafted unauthenticated HTTP request to the device that can overflow a buffer. This vulneraCVE-2022-314838.8An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywherCVE-2022-314847.5An unauthenticated attacker can send a specially crafted network packet to delete a user from the web interface. This vulnerability impacts CVE-2022-314855.3An unauthenticated attacker can send a specially crafted packets to update the “notes” section of the home page of the web interface. This vCVE-2022-314868.8An authenticated attacker can send a specially crafted route to the “edit_route.cgi” binary and have it execute shell commands. This vulneraCVE-2022-314877.5Inout Blockchain AltExchanger 1.2.1 and Inout Blockchain FiatExchanger 2.2.1 allow Chart/TradingView/chart_content/master.php symbol SQL inj
CVE-2022-31476: Medium severity, CVSS 5.5 | Vulnix