Lucene search

K
nvd[email protected]NVD:CVE-2023-32655
HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-32655

2023-11-1419:15:26
CWE-249
CWE-22
web.nvd.nist.gov
path transversal
intel nuc
mini pcs
usb type c
power delivery
installation software
escalation of privilege
local access
cve-2023-32655

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Path transversal in some Intelยฎ NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

NVD
Node
intelusb_type_c_power_delivery_controllerRange<1.0.10.3windows
AND
intelnuc_8_business_nuc8i7hnkqcMatch-
OR
intelnuc_8_enthusiast_nuc8i7hvkvaMatch-
OR
intelnuc_8_enthusiast_nuc8i7hvkvawMatch-
OR
intelnuc_kit_nuc8i7hnkMatch-
OR
intelnuc_kit_nuc8i7hvkMatch-

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

10.6%

Related for NVD:CVE-2023-32655