« Volver al listado

CVE-2022-21793

Estado: ModificadaMedia (5.5)—

Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via local access.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Vmware — I40enVmware — Ixgben

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-21793",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-21793",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-23T13:20:01.893383Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.5,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "secure@intel.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare",
          "versions": [
            {
              "status": "affected",
              "version": "before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-08-18T20:15:10.343",
  "references": [
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00650.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "secure@intel.com"
    },
    {
      "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00650.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via local access."
    },
    {
      "lang": "es",
      "value": "Una gestión insuficiente del flujo de control en los controladores Intel(R) Ethernet de la serie 500 para VMWare versiones anteriores a 1.11.4.0 y los controladores Intel(R) Ethernet de la serie 700 para VMWare versiones anteriores a 2.1.5.0, puede permitir que un usuario autenticado permita potencialmente una denegación de servicio por medio de acceso local."
    }
  ],
  "lastModified": "2026-06-17T04:26:59.653",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:ixgben:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41063D3D-BDA3-4C4B-88B4-C2918DA9C718",
              "versionEndExcluding": "1.11.4.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:82599_10_gigabit_ethernet_controller:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B313AD6B-775D-4504-A161-8351296ECAA3"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_x540:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "271E96F8-53B0-4618-9094-32F69511AAF6"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_x550:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "24B75C83-9DF6-4569-9158-5BF094441D84"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_x552:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D97A6EC7-6D19-4826-AEBF-2666CE8307DC"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:vmware:i40en:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DBAAB55-C8BE-48D2-89F9-C0432E9CBE75",
              "versionEndExcluding": "2.1.5.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_x710:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "21159CFA-D0C0-41CD-BDFB-90131E7145AB"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_x722:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2F26498D-8FA3-4E6F-A117-F06FFFB61C8C"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_xl710:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2A7EF19-9E60-4ECB-84C9-C5D5843E3B74"
            },
            {
              "criteria": "cpe:2.3:h:intel:ethernet_controller_xxv710:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E2A323FC-FB2A-48C4-9A5F-307DFC6CD4A0"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "secure@intel.com"
}