Rewterz Threat Advisory – Multiple Intel Data Center Manager Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2022-40685 CVSS:6.5

Intel Data Center Manager could allow a remote authenticated attacker to obtain sensitive information, caused by insufficiently protected credentials. An attacker could exploit this vulnerability to obtain sensitive information, and use this information to launch further attacks against the affected system.

CVE-2022-40210 CVSS:6.8

Intel Data Center Manager could allow a local authenticated attacker to gain elevated privileges on the system, caused by the exposure of data element to wrong session. An attacker could exploit this vulnerability to gain elevated privileges.

Impact

• Information Disclosure 
• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2022-40685
• CVE-2022-40210

Affected Vendors

Intel

Affected Products

• Intel Data Center Manager 5.0

Remediation

Refer to INTEL Security Advisory for patch, upgrade or suggested workaround information. 

INTEL Security Advisory