Lucene search
IntelCVELIST:CVE-2023-32660HistoryNov 14, 2023 - 7:04 p.m.
CVE-2023-32660
2023-11-1419:04:46
CWE-427
intel
www.cve.org
1
intel
nuc kit
thunderbolt 3
firmware update
privilege escalation
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Uncontrolled search path in some Intel® NUC Kit NUC6i7KYK Thunderbolt™ 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software",
"versions": [
{
"version": "before version 46",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2023-32660
2023-11-14 19:15:26
prion
prion
Privilege escalation
2023-11-14 19:15:00
cve
cve
CVE-2023-32660
2023-11-14 19:15:26
vulnrichment
vulnrichment
CVE-2023-32660
2023-11-14 19:04:46
intel
intel
Intel® NUC Software Advisory
2023-11-14 00:00:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-32660