Lucene search

[email protected]NVD:CVE-2023-32278

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-32278

2023-11-1419:15:25

CWE-249

CWE-22

[email protected]

web.nvd.nist.gov

intel nuc

uniwill service driver

path transversal

cve-2023-32278

escalation of privilege

local access

software studio

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

JSON

Path transversal in some Intel® NUC Uniwill Service Driver for Intel® NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver installation software before version 1.0.1.7 for Intel® NUC Software Studio may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD

Node

intelnuc_m15_laptop_kit_evo_laprc510Match-

intelnuc_m15_laptop_kit_evo_laprc710Match-

intelnuc_m15_laptop_kit_laprc510Match-

intelnuc_m15_laptop_kit_laprc710Match-

AND

intelnuc_uniwill_service_driverRange<1.0.1.7

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

JSON

Related for NVD:CVE-2023-32278

prion1 cve1 cvelist1 intel1