How severe is CVE-2022-21793?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Intel 82599 10 Gigabit Ethernet Controller

CVE-2022-21793

Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1.11.4.0 and in the Intel(R) Ethernet 700 Series Controller drivers for VMWare before version 2.1.5.0 may allow an authenticated user to potentially enable a denial of service via local access.

EPSS: 0.002 (8.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Intel 82599_10_gigabit_ethernet_controller
Intel Ethernet_controller_x540
Intel Ethernet_controller_x550
Intel Ethernet_controller_x552
Intel Ethernet_controller_x710
Intel Ethernet_controller_x722
Intel Ethernet_controller_xl710
Intel Ethernet_controller_xxv710
Vmware I40en
Vmware Ixgben

References

secure@intel.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-21793?: CVE-2022-21793 is a medium-severity vulnerability in Intel 82599 10 Gigabit Ethernet Controller. CVSS score: 5.5/10. Published 2022-08-18.
How severe is CVE-2022-21793?: Medium severity. CVSS v3 base score is 5.5 out of 10.