CVE-2022-26083

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-26083

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.1 / Impact : 5.8

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope CHANGED

G

eneration of weak initialization vector in an Intel(R) IPP Cryptography software library before version 2021.5 may allow an unauthenticated user to potentially enable information disclosure via local access.

References
Link Resource
https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*
History

02 Sep 2025, 15:35

Type Values Removed Values Added
References () https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html - () https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html - Vendor Advisory
First Time Intel integrated Performance Primitives Cryptography
Intel
Summary
  • (es) La generación de un vector de inicialización débil en una librería de software de criptografía Intel(R) IPP anterior a la versión 2021.5 puede permitir que un usuario no autenticado habilite potencialmente la divulgación de información a través del acceso local.
CPE cpe:2.3:a:intel:integrated_performance_primitives_cryptography:*:*:*:*:*:*:*:*

14 Feb 2025, 21:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-14 21:15

Updated : 2025-09-02 15:35

NVD link : CVE-2022-26083

Mitre link : CVE-2022-26083

CVE.ORG link : CVE-2022-26083

JSON object : View

Products Affected

intel

CWE
CWE-1204

Generation of Weak Initialization Vector (IV)