CVE-2022-43666: low-severity vulnerability in Intel Unison software
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.2%
In short
Intel Unison software leaves debug information accessible on the system, which could allow someone with local access to view sensitive system details they shouldn't see.
Technical detail
Debug information is not properly cleared in Intel Unison, creating an information disclosure vulnerability (CWE-1258). An authenticated local user can access this debug data to retrieve sensitive system information, with attack surface limited to local access and authenticated user privileges.
Summary generated and translated by AI from the official description.
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local access.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
n/a · Intel Unison software