Intel Data Center Manager vulnerabilities

30 CVEs affecting Intel Data Center Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31273, published 2023-11-14.

More from Intel.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-21225, published 2022-08-18. High severity, CVSS 8.0. EPSS: 1.5% chance of exploitation in the next 30 days. Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
• CVE-2020-12347, published 2020-11-12. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable escalation of privilege via network access.
• CVE-2019-0102, published 2019-02-18. High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days. Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network…
• CVE-2018-3679, published 2018-09-12. Critical severity, CVSS 9.6. EPSS: 1.2% chance of exploitation in the next 30 days. Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.
• CVE-2020-8669, published 2020-11-12. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access.
• CVE-2020-12349, published 2020-11-12. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable information disclosure via network access.
• CVE-2020-12353, published 2020-11-12. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper permissions in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated user to potentially enable denial of service via network access.
• CVE-2023-31273, published 2023-11-14. Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days. Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
• CVE-2022-41979, published 2023-05-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Protection mechanism failure in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.
• CVE-2022-33942, published 2022-11-11. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Latest

• CVE-2022-44619, published 2023-05-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-44610, published 2023-05-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. Improper authentication in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via network access.
• CVE-2022-43475, published 2023-05-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-41998, published 2023-05-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-40685, published 2023-05-10. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Insufficiently protected credentials in the Intel(R) DCM software before version 5.0.1 may allow an authenticated user to potentially enable information disclosure via network access.
• CVE-2022-40210, published 2023-05-10. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
• CVE-2022-24378, published 2022-08-18. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user to potentially enable denial of service via local access.