Lucene search

K
nvd[email protected]NVD:CVE-2022-36377
HistoryNov 11, 2022 - 4:15 p.m.

CVE-2022-36377

2022-11-1116:15:15
CWE-276
CWE-277
web.nvd.nist.gov
4
cve-2022-36377
intel wireless
escalation of privilege
windows

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Insecure inherited permissions in some Intel® Wireless Adapter Driver installation software for Intel® NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelnuc_8_rugged_kit_nuc8cchkrMatch-
OR
intelnuc_board_nuc8cchbMatch-
OR
intelnuc_kit_nuc5pgyhMatch-
OR
intelnuc_kit_nuc5ppyhMatch-
OR
intelnuc_kit_nuc6cayhMatch-
OR
intelnuc_kit_nuc6caysMatch-
AND
intelnuc_kit_wireless_adapter_driver_installerRange<22.40.0windows_10
VendorProductVersionCPE
intelnuc_8_rugged_kit_nuc8cchkr-cpe:2.3:h:intel:nuc_8_rugged_kit_nuc8cchkr:-:*:*:*:*:*:*:*
intelnuc_board_nuc8cchb-cpe:2.3:h:intel:nuc_board_nuc8cchb:-:*:*:*:*:*:*:*
intelnuc_kit_nuc5pgyh-cpe:2.3:h:intel:nuc_kit_nuc5pgyh:-:*:*:*:*:*:*:*
intelnuc_kit_nuc5ppyh-cpe:2.3:h:intel:nuc_kit_nuc5ppyh:-:*:*:*:*:*:*:*
intelnuc_kit_nuc6cayh-cpe:2.3:h:intel:nuc_kit_nuc6cayh:-:*:*:*:*:*:*:*
intelnuc_kit_nuc6cays-cpe:2.3:h:intel:nuc_kit_nuc6cays:-:*:*:*:*:*:*:*
intelnuc_kit_wireless_adapter_driver_installer*cpe:2.3:o:intel:nuc_kit_wireless_adapter_driver_installer:*:*:*:*:*:windows_10:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

12.6%

Related for NVD:CVE-2022-36377