VULNERABILITY INTELLIGENCE
CVE-2022-21163
CVSS score8.4 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2023-02-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Description
Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- secure@intel.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory