CVE-2022-37409 - Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access

Back Back to CVE browser

MEDIUM

Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access

Published May 10, 2023

5.5

MEDIUM

CVSS 3.1

EPSS 0.17%

Description

Insufficient control flow management for the Intel(R) IPP Cryptography software before version 2021.6 may allow an authenticated user to potentially enable information disclosure via local access.

Affected products

Vendor n/a Product Intel(R) IPP Cryptography software Default
unaffected
- Version
  before version 2021.6
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Intel(R) IPP Cryptography software

unaffected

Version	Status	Constraints
before version 2021.6	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-691

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40042
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-40042		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00788.html		Vendor Advisory