CVE-2022-38973 describes an improper access control vulnerability affecting Intel Arc A770 and A750 Limited Edition graphics cards sold between October and December 2022. An authenticated local user could exploit this to potentially cause a denial of service or disclose sensitive information. With a CVSS score of 7.1 (High), it requires local access but has low attack complexity, posing a significant risk to confidentiality and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion, indicating a low immediate threat of widespread attacks.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:intel:arc_a750_firmware:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:intel:arc_a770_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:L
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.