CVE-2022-21163 Privilege escalation in Crypto API Toolkit for Intel(R) SGX
An authenticated local user can escalate privileges due to improper access control in the Intel SGX Crypto API Toolkit.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-21163?
CVE-2022-21163 is a high-severity vulnerability in Crypto API Toolkit for Intel(R) SGX, published on 16 Feb 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an authenticated user to potentially enable escalation of privilege via local access.
Which versions are affected by CVE-2022-21163?
It affects 1 product.
Products include Intel Crypto Api Toolkit for Intel Sgx.
How do I fix CVE-2022-21163?
No fix has been published for CVE-2022-21163 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-21163 being exploited?
There is no known exploitation of CVE-2022-21163 in the wild and no public exploit code.
Other vulnerabilities in Crypto API Toolkit for Intel(R) SGX
Sources
Also known as GHSA-rrpm-qgcf-mhgv.