CVE-2022-23182

Vulnerability

An improper access control vulnerability exists in Intel(R) Data Center Manager software before version 4.1. This issue allows an unauthenticated attacker to potentially escalate privileges via adjacent network access [1]. The vulnerability resides in the management interface, which fails to properly enforce authentication and authorization checks.

Exploitation

An attacker must have adjacent network access to the vulnerable system. No prior authentication is required. The attacker can send crafted requests to the management interface, exploiting the missing access controls to gain elevated privileges [1].

Impact

Successful exploitation enables an unauthenticated attacker to escalate privileges, potentially gaining administrative or higher-level control over the affected system. This could lead to full compromise of the Data Center Manager and associated infrastructure.

Mitigation

Intel has released version 4.1 to address this vulnerability. Users should update to Intel(R) Data Center Manager version 4.1 or later. No workarounds are provided in the advisory [1].