Vulnerabilities > CVE-2022-37409 - Unspecified vulnerability in Intel Integrated Performance Primitives Cryptography

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

intel

NVD

Published: 2023-05-10

Updated: 2023-11-07

Summary

Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

Vulnerable Configurations

Part	Description	Count
Application	Intel Intel Integrated Performance Primitives Cryptography 2018_U3.1 Intel Integrated Performance Primitives Cryptography 2019 Intel Integrated Performance Primitives Cryptography 2020 Intel Integrated Performance Primitives Cryptography 2021.2 Intel Integrated Performance Primitives Cryptography 2021.3 Intel Integrated Performance Primitives Cryptography 2021.4 Intel Integrated Performance Primitives Cryptography 2021.5	11

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html