{
  "affected": [],
  "aliases": [
    "CVE-2022-36416"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-02-16T21:15:00Z",
    "severity": "HIGH"
  },
  "details": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access.",
  "id": "GHSA-8xqw-f37j-96v8",
  "modified": "2023-03-06T21:30:19Z",
  "published": "2023-02-16T21:30:25Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-36416"
    },
    {
      "type": "WEB",
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Intel Distribution pour le langage de programmation Python versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SUR versions ant\u00e9rieures \u00e0 2.4.8902",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel DSA versions ant\u00e9rieures \u00e0 22.4.26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler Runtime versions ant\u00e9rieures \u00e0 2022.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les processeurs Intel dont la liste est mentionn\u00e9e dans les liens des fabriquants de la section Documentation.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 0.72",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.86",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CVAT versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions ant\u00e9rieures \u00e0 1.10.0.13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA Add-on pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Collective Communications Library (oneCCL) versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Data Analytics Library versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.1.4479",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel C++ Compiler Classic versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Media SDK versions ant\u00e9rieures \u00e0 22.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.78",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FCS server versions ant\u00e9rieures \u00e0 1.1.79.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Deep Neural Network (oneDNN) versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.2.4579v3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Battery Life Diagnostic Tool versions ant\u00e9rieures \u00e0 2.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Iris Xe MAX pour Windows versions ant\u00e9rieures \u00e0 100.0.5.1474",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 egs-0.91-179",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OFU versions ant\u00e9rieures \u00e0 14.1.28",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel MPI Library pour Intel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro edition versions ant\u00e9rieures \u00e0 22.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.0.0.4143",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel E810 Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 1.7.0.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 wht-1.01-61",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Linux versions ant\u00e9rieures \u00e0 4.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel QATzip versions ant\u00e9rieures \u00e0 1.0.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Administrative Tools pour Intel Network Adapters versions ant\u00e9rieures \u00e0 27.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard Edition versions ant\u00e9rieures \u00e0 21.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Linux versions ant\u00e9rieures \u00e0 2.16.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Open CAS versions ant\u00e9rieures \u00e0 22.3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro Edition versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel EMA versions ant\u00e9rieures \u00e0 1.8.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.09",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les applications Android Intel ON Event Series versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Windows versions ant\u00e9rieures \u00e0 2.15.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard edition versions ant\u00e9rieures \u00e0 22.1STD",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 700 Series Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 9.101",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E3_06.00.03.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneapi-cli pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 0.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Crypto API Toolkit pour Intel SGX versions ant\u00e9rieures \u00e0 2.0 ID commit 91ee496",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Windows versions ant\u00e9rieures \u00e0 1.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E5_04.04.04.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA SDK pour OpenCL Pro Edition versions ant\u00e9rieures \u00e0 22.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions ant\u00e9rieures \u00e0 1.5.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-34346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34346"
    },
    {
      "name": "CVE-2022-26840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26840"
    },
    {
      "name": "CVE-2022-29514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29514"
    },
    {
      "name": "CVE-2022-32971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32971"
    },
    {
      "name": "CVE-2021-33104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33104"
    },
    {
      "name": "CVE-2022-33972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33972"
    },
    {
      "name": "CVE-2022-21163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21163"
    },
    {
      "name": "CVE-2022-32575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32575"
    },
    {
      "name": "CVE-2022-26421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26421"
    },
    {
      "name": "CVE-2022-30539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30539"
    },
    {
      "name": "CVE-2022-33964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33964"
    },
    {
      "name": "CVE-2022-29523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29523"
    },
    {
      "name": "CVE-2022-36348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36348"
    },
    {
      "name": "CVE-2022-36369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36369"
    },
    {
      "name": "CVE-2022-34157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34157"
    },
    {
      "name": "CVE-2022-26345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26345"
    },
    {
      "name": "CVE-2022-25992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25992"
    },
    {
      "name": "CVE-2022-26888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26888"
    },
    {
      "name": "CVE-2022-30339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30339"
    },
    {
      "name": "CVE-2022-34864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34864"
    },
    {
      "name": "CVE-2022-26032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26032"
    },
    {
      "name": "CVE-2021-39295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39295"
    },
    {
      "name": "CVE-2022-30692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30692"
    },
    {
      "name": "CVE-2022-36398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36398"
    },
    {
      "name": "CVE-2022-30704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30704"
    },
    {
      "name": "CVE-2022-35729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35729"
    },
    {
      "name": "CVE-2022-26425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26425"
    },
    {
      "name": "CVE-2022-41314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41314"
    },
    {
      "name": "CVE-2022-36397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36397"
    },
    {
      "name": "CVE-2022-34849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34849"
    },
    {
      "name": "CVE-2022-25987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25987"
    },
    {
      "name": "CVE-2022-31476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31476"
    },
    {
      "name": "CVE-2022-36287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36287"
    },
    {
      "name": "CVE-2022-32231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32231"
    },
    {
      "name": "CVE-2022-26052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26052"
    },
    {
      "name": "CVE-2022-21216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21216"
    },
    {
      "name": "CVE-2022-36289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36289"
    },
    {
      "name": "CVE-2022-30530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30530"
    },
    {
      "name": "CVE-2022-26837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26837"
    },
    {
      "name": "CVE-2022-29493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29493"
    },
    {
      "name": "CVE-2022-35883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35883"
    },
    {
      "name": "CVE-2022-25905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25905"
    },
    {
      "name": "CVE-2022-34854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34854"
    },
    {
      "name": "CVE-2022-33190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33190"
    },
    {
      "name": "CVE-2022-36794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36794"
    },
    {
      "name": "CVE-2022-33902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33902"
    },
    {
      "name": "CVE-2022-37329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37329"
    },
    {
      "name": "CVE-2022-37340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37340"
    },
    {
      "name": "CVE-2022-26509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26509"
    },
    {
      "name": "CVE-2022-32764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32764"
    },
    {
      "name": "CVE-2022-33196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33196"
    },
    {
      "name": "CVE-2022-27170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27170"
    },
    {
      "name": "CVE-2022-26076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26076"
    },
    {
      "name": "CVE-2021-39296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39296"
    },
    {
      "name": "CVE-2022-34841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34841"
    },
    {
      "name": "CVE-2022-36797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36797"
    },
    {
      "name": "CVE-2022-38056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38056"
    },
    {
      "name": "CVE-2022-36416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36416"
    },
    {
      "name": "CVE-2022-34153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34153"
    },
    {
      "name": "CVE-2022-32570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32570"
    },
    {
      "name": "CVE-2022-27808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27808"
    },
    {
      "name": "CVE-2022-30531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30531"
    },
    {
      "name": "CVE-2022-26062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26062"
    },
    {
      "name": "CVE-2022-38090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38090"
    },
    {
      "name": "CVE-2022-41614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41614"
    },
    {
      "name": "CVE-2022-29494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29494"
    },
    {
      "name": "CVE-2022-33892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33892"
    },
    {
      "name": "CVE-2022-36278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36278"
    },
    {
      "name": "CVE-2022-26512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26512"
    },
    {
      "name": "CVE-2022-34843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34843"
    },
    {
      "name": "CVE-2021-0187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0187"
    },
    {
      "name": "CVE-2022-36382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36382"
    },
    {
      "name": "CVE-2022-27234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27234"
    },
    {
      "name": "CVE-2022-26343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26343"
    },
    {
      "name": "CVE-2022-33946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33946"
    },
    {
      "name": "CVE-2022-26841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26841"
    },
    {
      "name": "CVE-2022-26843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26843"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0127",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eIntel\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges,\nun d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00674 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00714 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00700 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00767 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00770 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00751 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00776 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00728 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00731 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00738 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00726 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00717 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00733 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00764 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00762 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00737 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00761 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00736 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00718 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00725 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00754 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00765 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00765.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00677 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00730 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00739 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00769 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00727 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00746 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00729 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00750 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00721 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html"
    }
  ]
}

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Intel Distribution pour le langage de programmation Python versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SUR versions ant\u00e9rieures \u00e0 2.4.8902",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Trace Analyzer and Collector versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel DSA versions ant\u00e9rieures \u00e0 22.4.26",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler Runtime versions ant\u00e9rieures \u00e0 2022.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les processeurs Intel dont la liste est mentionn\u00e9e dans les liens des fabriquants de la section Documentation.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 0.72",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.86",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel CVAT versions ant\u00e9rieures \u00e0 2.0.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet 500 Series Controller pour VMWare versions ant\u00e9rieures \u00e0 1.10.0.13",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA Add-on pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Collective Communications Library (oneCCL) versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Data Analytics Library versions ant\u00e9rieures \u00e0 2021.5",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.1.4479",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel C++ Compiler Classic versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 2022.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Media SDK versions ant\u00e9rieures \u00e0 22.2.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.78",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FCS server versions ant\u00e9rieures \u00e0 1.1.79.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI DPC++/C++ Compiler versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneAPI Deep Neural Network (oneDNN) versions ant\u00e9rieures \u00e0 2022.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.4.2.4579v3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Battery Life Diagnostic Tool versions ant\u00e9rieures \u00e0 2.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Iris Xe MAX pour Windows versions ant\u00e9rieures \u00e0 100.0.5.1474",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 egs-0.91-179",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OFU versions ant\u00e9rieures \u00e0 14.1.28",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel MPI Library pour Intel oneAPI HPC Toolkit versions ant\u00e9rieures \u00e0 2021.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro edition versions ant\u00e9rieures \u00e0 22.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Integrated Sensor Solution versions ant\u00e9rieures \u00e0 5.0.0.4143",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel E810 Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 1.7.0.8",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel OpenBMC versions ant\u00e9rieures \u00e0 wht-1.01-61",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Linux versions ant\u00e9rieures \u00e0 4.17",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel QATzip versions ant\u00e9rieures \u00e0 1.0.9",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Administrative Tools pour Intel Network Adapters versions ant\u00e9rieures \u00e0 27.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard Edition versions ant\u00e9rieures \u00e0 21.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Linux versions ant\u00e9rieures \u00e0 2.16.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Open CAS versions ant\u00e9rieures \u00e0 22.3.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Pro Edition versions ant\u00e9rieures \u00e0 21.3",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel EMA versions ant\u00e9rieures \u00e0 1.8.1.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Micrologiciel Intel BMC versions ant\u00e9rieures \u00e0 2.09",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les applications Android Intel ON Event Series versions ant\u00e9rieures \u00e0 2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SGX SDK software pour Windows versions ant\u00e9rieures \u00e0 2.15.100.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Quartus Prime Standard edition versions ant\u00e9rieures \u00e0 22.1STD",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel 700 Series Ethernet Controllers and Adapters versions ant\u00e9rieures \u00e0 9.101",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Non-Volatile Memory (NVM) Update Utility pour Intel Ethernet Network Adapter E810 Series versions ant\u00e9rieures \u00e0 4.01",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E3_06.00.03.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel oneapi-cli pour Intel oneAPI Toolkits versions ant\u00e9rieures \u00e0 0.2.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel Crypto API Toolkit pour Intel SGX versions ant\u00e9rieures \u00e0 2.0 ID commit 91ee496",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel QAT pour Windows versions ant\u00e9rieures \u00e0 1.6",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel SPS firmware versions ant\u00e9rieures \u00e0 SPS_E5_04.04.04.300.0",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Intel FPGA SDK pour OpenCL Pro Edition versions ant\u00e9rieures \u00e0 22.1",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    },
    {
      "description": "Les pilotes Intel Ethernet Controller Administrative Tools pour Windows versions ant\u00e9rieures \u00e0 1.5.0.2",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Intel",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2022-34346",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34346"
    },
    {
      "name": "CVE-2022-26840",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26840"
    },
    {
      "name": "CVE-2022-29514",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29514"
    },
    {
      "name": "CVE-2022-32971",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32971"
    },
    {
      "name": "CVE-2021-33104",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-33104"
    },
    {
      "name": "CVE-2022-33972",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33972"
    },
    {
      "name": "CVE-2022-21163",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21163"
    },
    {
      "name": "CVE-2022-32575",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32575"
    },
    {
      "name": "CVE-2022-26421",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26421"
    },
    {
      "name": "CVE-2022-30539",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30539"
    },
    {
      "name": "CVE-2022-33964",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33964"
    },
    {
      "name": "CVE-2022-29523",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29523"
    },
    {
      "name": "CVE-2022-36348",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36348"
    },
    {
      "name": "CVE-2022-36369",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36369"
    },
    {
      "name": "CVE-2022-34157",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34157"
    },
    {
      "name": "CVE-2022-26345",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26345"
    },
    {
      "name": "CVE-2022-25992",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25992"
    },
    {
      "name": "CVE-2022-26888",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26888"
    },
    {
      "name": "CVE-2022-30339",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30339"
    },
    {
      "name": "CVE-2022-34864",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34864"
    },
    {
      "name": "CVE-2022-26032",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26032"
    },
    {
      "name": "CVE-2021-39295",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39295"
    },
    {
      "name": "CVE-2022-30692",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30692"
    },
    {
      "name": "CVE-2022-36398",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36398"
    },
    {
      "name": "CVE-2022-30704",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30704"
    },
    {
      "name": "CVE-2022-35729",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35729"
    },
    {
      "name": "CVE-2022-26425",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26425"
    },
    {
      "name": "CVE-2022-41314",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41314"
    },
    {
      "name": "CVE-2022-36397",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36397"
    },
    {
      "name": "CVE-2022-34849",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34849"
    },
    {
      "name": "CVE-2022-25987",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25987"
    },
    {
      "name": "CVE-2022-31476",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-31476"
    },
    {
      "name": "CVE-2022-36287",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36287"
    },
    {
      "name": "CVE-2022-32231",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32231"
    },
    {
      "name": "CVE-2022-26052",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26052"
    },
    {
      "name": "CVE-2022-21216",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-21216"
    },
    {
      "name": "CVE-2022-36289",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36289"
    },
    {
      "name": "CVE-2022-30530",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30530"
    },
    {
      "name": "CVE-2022-26837",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26837"
    },
    {
      "name": "CVE-2022-29493",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29493"
    },
    {
      "name": "CVE-2022-35883",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-35883"
    },
    {
      "name": "CVE-2022-25905",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-25905"
    },
    {
      "name": "CVE-2022-34854",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34854"
    },
    {
      "name": "CVE-2022-33190",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33190"
    },
    {
      "name": "CVE-2022-36794",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36794"
    },
    {
      "name": "CVE-2022-33902",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33902"
    },
    {
      "name": "CVE-2022-37329",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37329"
    },
    {
      "name": "CVE-2022-37340",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-37340"
    },
    {
      "name": "CVE-2022-26509",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26509"
    },
    {
      "name": "CVE-2022-32764",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32764"
    },
    {
      "name": "CVE-2022-33196",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33196"
    },
    {
      "name": "CVE-2022-27170",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27170"
    },
    {
      "name": "CVE-2022-26076",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26076"
    },
    {
      "name": "CVE-2021-39296",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-39296"
    },
    {
      "name": "CVE-2022-34841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34841"
    },
    {
      "name": "CVE-2022-36797",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36797"
    },
    {
      "name": "CVE-2022-38056",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38056"
    },
    {
      "name": "CVE-2022-36416",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36416"
    },
    {
      "name": "CVE-2022-34153",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34153"
    },
    {
      "name": "CVE-2022-32570",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-32570"
    },
    {
      "name": "CVE-2022-27808",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27808"
    },
    {
      "name": "CVE-2022-30531",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-30531"
    },
    {
      "name": "CVE-2022-26062",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26062"
    },
    {
      "name": "CVE-2022-38090",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-38090"
    },
    {
      "name": "CVE-2022-41614",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-41614"
    },
    {
      "name": "CVE-2022-29494",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-29494"
    },
    {
      "name": "CVE-2022-33892",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33892"
    },
    {
      "name": "CVE-2022-36278",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36278"
    },
    {
      "name": "CVE-2022-26512",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26512"
    },
    {
      "name": "CVE-2022-34843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-34843"
    },
    {
      "name": "CVE-2021-0187",
      "url": "https://www.cve.org/CVERecord?id=CVE-2021-0187"
    },
    {
      "name": "CVE-2022-36382",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-36382"
    },
    {
      "name": "CVE-2022-27234",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-27234"
    },
    {
      "name": "CVE-2022-26343",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26343"
    },
    {
      "name": "CVE-2022-33946",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-33946"
    },
    {
      "name": "CVE-2022-26841",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26841"
    },
    {
      "name": "CVE-2022-26843",
      "url": "https://www.cve.org/CVERecord?id=CVE-2022-26843"
    }
  ],
  "links": [],
  "reference": "CERTFR-2023-AVI-0127",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2023-02-15T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    },
    {
      "description": "\u00c9l\u00e9vation de privil\u00e8ges"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 corrig\u00e9es dans \u003cspan\nclass=\"textit\"\u003eIntel\u003c/span\u003e. Elles permettent \u00e0 un attaquant de\nprovoquer une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es, un\ncontournement de la politique de s\u00e9curit\u00e9, une \u00e9l\u00e9vation de privil\u00e8ges,\nun d\u00e9ni de service et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Intel",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00674 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00674.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00714 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00714.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00700 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00767 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00770 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00751 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00751.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00776 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00776.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00728 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00728.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00731 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00731.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00738 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00726 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00726.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00717 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00717.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00733 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00733.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00764 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00764.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00762 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00762.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00737 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00737.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00761 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00736 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00736.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00718 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00718.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00725 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00725.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00754 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00765 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00765.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00677 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00677.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00730 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00730.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00739 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00739.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00769 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00769.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00727 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00727.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00746 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00746.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00729 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00729.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00750 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    },
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Intel intel-sa-00721 du 14 f\u00e9vrier 2023",
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00721.html"
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2022-36416",
    "description": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access.",
    "id": "GSD-2022-36416"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-36416"
      ],
      "details": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access.",
      "id": "GSD-2022-36416",
      "modified": "2023-12-13T01:19:21.692438Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "secure@intel.com",
        "ID": "CVE-2022-36416",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Intel(R) Ethernet 500 Series Controller drivers for VMware",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "before version 1.10.0.13"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "LOW",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "escalation of privilege"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html",
            "refsource": "MISC",
            "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:vmware:ixgben:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.10.0.13",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@intel.com",
          "ID": "CVE-2022-36416"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-noinfo"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-03-06T19:41Z",
      "publishedDate": "2023-02-16T21:15Z"
    }
  }
}

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "Intel Ethernet Controller bezeichnet Netzwerkkarten (NIC) des Herstellers Intel.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in Intel Ethernet Controller ausnutzen, um seine Privilegien zu erh\u00f6hen und einen Denial of Service Zustand auszul\u00f6sen.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2023-0362 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-0362.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2023-0362 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-0362"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2023-02-14",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2023-02-14",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00754.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2023-02-14",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00761.html"
      },
      {
        "category": "external",
        "summary": "Intel Security Advisory vom 2023-02-14",
        "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00770.html"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory",
        "url": "https://support.lenovo.com/us/en/product_security/ps500548-intel-ethernet-vmware-drivers-advisory"
      },
      {
        "category": "external",
        "summary": "Lenovo Security Advisory",
        "url": "https://support.lenovo.com/us/en/product_security/ps500544"
      },
      {
        "category": "external",
        "summary": "Dell Security Advisory DSA-2023-016 vom 2024-10-07",
        "url": "https://www.dell.com/support/kbdoc/de-de/000209267/dsa-2023-016-dell-poweredge-server-security-update-for-intel-ethernet-controllers-and-adapters-vulnerabilities"
      }
    ],
    "source_lang": "en-US",
    "title": "Intel Ethernet Controller: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2024-10-07T22:00:00.000+00:00",
      "generator": {
        "date": "2024-10-08T08:12:22.221+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.8"
        }
      },
      "id": "WID-SEC-W-2023-0362",
      "initial_release_date": "2023-02-14T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2023-02-14T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        },
        {
          "date": "2024-10-07T22:00:00.000+00:00",
          "number": "2",
          "summary": "Neue Updates von Dell aufgenommen"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Dell PowerEdge",
            "product": {
              "name": "Dell PowerEdge",
              "product_id": "T036715",
              "product_identification_helper": {
                "cpe": "cpe:/h:dell:poweredge:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Dell"
      },
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "VMWare Drivers",
                "product": {
                  "name": "Intel Ethernet Controller VMWare Drivers",
                  "product_id": "T026351",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:ethernet_controller:vmware_drivers"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Administrative Tools Drivers",
                "product": {
                  "name": "Intel Ethernet Controller Administrative Tools Drivers",
                  "product_id": "T026352",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:ethernet_controller:administrative_tools_drivers"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "Network Adapter",
                "product": {
                  "name": "Intel Ethernet Controller Network Adapter",
                  "product_id": "T026353",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:ethernet_controller:network_adapter"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Intel Ethernet Controller",
                "product": {
                  "name": "Intel Ethernet Controller",
                  "product_id": "T026354",
                  "product_identification_helper": {
                    "cpe": "cpe:/h:intel:ethernet_controller:-"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Ethernet Controller"
          }
        ],
        "category": "vendor",
        "name": "Intel"
      },
      {
        "branches": [
          {
            "category": "product_name",
            "name": "Lenovo Computer",
            "product": {
              "name": "Lenovo Computer",
              "product_id": "T006520",
              "product_identification_helper": {
                "cpe": "cpe:/o:lenovo:lenovo_computer:-"
              }
            }
          }
        ],
        "category": "vendor",
        "name": "Lenovo"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-27808",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Ethernet Controller existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines fehlenden Schutzmechanismus, einer unzureichenden Kontrollflussverwaltung und eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern. Das erfolgreiche Ausnutzen einer dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T036715",
          "T026351",
          "T026353",
          "T026352"
        ]
      },
      "release_date": "2023-02-14T23:00:00.000+00:00",
      "title": "CVE-2022-27808"
    },
    {
      "cve": "CVE-2022-36416",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Ethernet Controller existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines fehlenden Schutzmechanismus, einer unzureichenden Kontrollflussverwaltung und eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern. Das erfolgreiche Ausnutzen einer dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T036715",
          "T026351",
          "T026353",
          "T026352"
        ]
      },
      "release_date": "2023-02-14T23:00:00.000+00:00",
      "title": "CVE-2022-36416"
    },
    {
      "cve": "CVE-2022-41314",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Ethernet Controller existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines fehlenden Schutzmechanismus, einer unzureichenden Kontrollflussverwaltung und eines unkontrollierten Suchpfads. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um seine Privilegien zu erweitern. Das erfolgreiche Ausnutzen einer dieser Schwachstellen erfordert eine Benutzerinteraktion."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T036715",
          "T026351",
          "T026353",
          "T026352"
        ]
      },
      "release_date": "2023-02-14T23:00:00.000+00:00",
      "title": "CVE-2022-41314"
    },
    {
      "cve": "CVE-2022-36382",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Ethernet Controller existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines Out-of-bounds write und eines Fehlers im Erkennungsmechanismus. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T036715",
          "T026351",
          "T026354"
        ]
      },
      "release_date": "2023-02-14T23:00:00.000+00:00",
      "title": "CVE-2022-36382"
    },
    {
      "cve": "CVE-2022-36797",
      "notes": [
        {
          "category": "description",
          "text": "In Intel Ethernet Controller existieren mehrere Schwachstellen. Die Fehler bestehen aufgrund eines Out-of-bounds write und eines Fehlers im Erkennungsmechanismus. Ein lokaler Angreifer kann diese Schwachstellen ausnutzen, um einen Denial-of-Service-Zustand zu verursachen. Die erfolgreiche Ausnutzung einer dieser Schwachstellen erfordert erh\u00f6hte Rechte."
        }
      ],
      "product_status": {
        "known_affected": [
          "T006520",
          "T036715",
          "T026351",
          "T026354"
        ]
      },
      "release_date": "2023-02-14T23:00:00.000+00:00",
      "title": "CVE-2022-36797"
    }
  ]
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:ixgben:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0C08CCC-D1E2-4642-B98F-63353C0E6D2C",
              "versionEndExcluding": "1.10.0.13",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Protection mechanism failure in the Intel(R) Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access."
    }
  ],
  "id": "CVE-2022-36416",
  "lastModified": "2024-11-21T07:12:58.330",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 4.4,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 2.5,
        "source": "secure@intel.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2023-02-16T21:15:13.480",
  "references": [
    {
      "source": "secure@intel.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00750.html"
    }
  ],
  "sourceIdentifier": "secure@intel.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}