CVE-2022-36278
High
Published: 16 February 2023
Published
16 February 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
8.2
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
EPSS Score
0.0006
18.0th percentile
Risk Priority
16
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2022-36278 is a high-severity an unspecified weakness vulnerability in Intel Battery Life Diagnostic Tool. Its CVSS base score is 8.2 (High).
Operationally, ranked at the 18.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-38995
Vulnerability details
Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
intel
battery life diagnostic tool
2.2.0
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.