writeups.xyz / From Zero to Hero Part 2: From SQL Injection to RCE on Intel DCM (CVE-2022-21225)

Submitter : c2a

Date: 1 December 2022

Bounty : 10,000

Vulnerabilities :

• SQL Injection
• Kerberos
• RCE
• Privilege Escalation
• Security Code Review

Programs :

• Intel

Authors :

• Julien Ahrens (@MrTuxracer)

Link :
https://www.rcesecurity.com/2022/12/from-zero-to-hero-part-2-intel-dcm-sql-injection-to-rce-cve-2022-21225/