CVE-2022-44610

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-287

Affected software

Vendor	Product	Versions
n/a	Intel(R) DCM software	before version 5.1

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00806.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00806.htmlPatch, Vendor Advisory

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-446118.0Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of CVE-2022-446125.5Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to potentially CVE-2022-446177.5A flaw was found in libXpm. When processing a file with width of 0 and a very large height, some parser functions will be called repeatedly CVE-2022-446197.8Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially ena CVE-2022-44624.3An issue has been discovered in GitLab affecting all versions starting from 12.8 before 15.7.8, all versions starting from 15.8 before 15.8.CVE-2022-446208.8Improper authentication vulnerability in UDR-JA1604/UDR-JA1608/UDR-JA1616 firmware versions 71x10.1.107112.43A and earlier allows a remote a CVE-2022-446219.8Diagnosis Controller miss parameter validation, so user may attacked by command injection via HTTP Request.CVE-2022-446225.3In JetBrains TeamCity version between 2021.2 and 2022.10 access permissions for secure token health items were excessive CVE-2022-446237.5In JetBrains TeamCity version before 2022.10, Project Viewer could see scrambled secure values in the MetaRunner settings CVE-2022-446247.5In JetBrains TeamCity version before 2022.10, Password parameters could be exposed in the build log if they contained special characters CVE-2022-446254.8Auth. (admin+) Stored Cross-Site Scripting') vulnerability in Zephilou Cyklodev WP Notify plugin <= 1.2.1 versions.CVE-2022-446266.3Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 1