How severe is CVE-2022-21163?

High severity. CVSS v3 base score is 8.4 out of 10.

Vulnerability in Intel Crypto API Toolkit For Sgx

CVE-2022-21163

Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (16.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.4 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N.

Affected products

Intel Crypto_api_toolkit_for_intel_sgx
N/a Crypto Api Toolkit For Intel(r) Sgx — versions before version 2.0 commit ID 91ee496

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-21163?: CVE-2022-21163 is a high-severity vulnerability in Intel Crypto API Toolkit For Sgx. CVSS score: 8.4/10. Published 2023-02-16.
How severe is CVE-2022-21163?: High severity. CVSS v3 base score is 8.4 out of 10.