Lucene search

K
cvelistIntelCVELIST:CVE-2023-32278
HistoryNov 14, 2023 - 7:04 p.m.

CVE-2023-32278

2023-11-1419:04:49
CWE-249
intel
www.cve.org
path transversal
intel nuc
m15 laptop kits
escalation of privilege
local access

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Path transversal in some Intelยฎ NUC Uniwill Service Driver for Intelยฎ NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for Intelยฎ NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software",
    "versions": [
      {
        "version": "before version 1.0.1.7 for Intel(R) NUC Software Studio",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Related for CVELIST:CVE-2023-32278