CVE-2022-37341

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware	See references
intel	ethernet_network_adapter_xl710-qda1_for_open_compute_project	< 29.0.1
intel	ethernet_network_adapter_x710-t4l_for_ocp_3.0	< 29.0.1
intel	ethernet_network_adapter_x710-t4l	< 29.0.1
intel	ethernet_network_adapter_e810-xxvda2_for_ocp_3.0	< 29.0.1
intel	ethernet_network_adapter_e810-xxvda4	< 29.0.1
intel	ethernet_network_adapter_e810-2cqda2	< 29.0.1
intel	ethernet_network_adapter_xl710-qda2_for_open_compute_project	< 29.0.1
intel	ethernet_network_adapter_e810-xxvda2	< 29.0.1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.htmlVendor Advisory

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-373424.8Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability Add Shortcodes Actions And Filters plugin <= 2.0.9 at WordPress.CVE-2022-373436.7Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pr CVE-2022-373449.8Missing Access Control vulnerability in PHP Crafts Accommodation System plugin <= 1.0.1 at WordPress.CVE-2022-373457.8Improper authentication in BIOS firmware[A1] for some Intel(R) NUC Kits before version RY0386 may allow an authenticated user to potentially CVE-2022-373469.8EC-CUBE plugin 'Product Image Bulk Upload Plugin' 1.0.0 and 4.1.0 contains an insufficient verification vulnerability when uploading files. CVE-2022-373475.5Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a CVE-2022-373485.5Trend Micro Security 2021 and 2022 (Consumer) is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow a CVE-2022-373497.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-37359.8A vulnerability was found in seccome Ehoney. It has been rated as critical. This issue affects some unknown processing of the file /api/publ CVE-2022-373507.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is re CVE-2022-373515.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti CVE-2022-373525.5This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interacti