CVE-2022-40210 MEDIUM

CVE-2022-40210

Vendor N/A

Product Intel DCM software

Weakness CWE-488

Published May 10, 2023

Last update January 27, 2025

View on NVD All CVEs

CVSS base score

6.8/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

What the vulnerability does

01Description

Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Key dates

02Disclosure timeline

May 10, 2023 CVE published

January 27, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-40210 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/488.html

Related vulnerabilities

04Related CVE

CVE-2026-23646 OpenProject users can delete other user's session, causing them to be logged out CVE-2023-6519 Seeing admin password hash value in Mia Technology's Mia-Med CVE-2026-23844 Whisper Money has IDOR Vulnerability on sync/balances endpoint CVE-2025-24934 SO_REUSEPORT_LB breaks connect(2) for UDP sockets CVE-2024-5148 Gnome-remote-desktop: inadequate validation of session agents using d-bus methods may expose rdp tls certificate