CVE-2022-27635

MEDIUM6.7EPSS 0.04%

firmware-nonfree - security update

Published: 8/11/2023Modified: 4/28/2026

Also known as:DEBIAN-CVE-2022-27635DEBIAN-CVE-2022-36351DEBIAN-CVE-2022-38076DEBIAN-CVE-2022-40964DEBIAN-CVE-2022-46329DLA-3596-1

Description

Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.

Affected packages (2)

Debian/firmware-nonfreefrom 0
Debian/firmware-nonfreefrom 0, < 20190114+really20220913-0+deb10u2

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2022-27635