CVE-2022-26083 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	7.5 HIGH	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 7.73%

Affected Products (NVD)

Vendor	Product	Version
intel	integrated_performance_primitives_cryptography	𝑥 < 2021.5

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

ipp-crypto

trixie

2021.12.1-1

fixed

Common Weakness Enumeration

CWE-1204 - Generation of Weak Initialization Vector (IV)
The product uses a cryptographic primitive that uses an Initialization Vector (IV), but the product does not generate IVs that are sufficiently unpredictable or unique according to the expected cryptographic requirements for that primitive.

References

https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00667.html