CVE-2022-34855

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34848

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34855

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34855

The Intel NUC Pro Software Suite vulnerability CVE-2022-34855 is a path traversal issue reported for versions before 2.0.0.3 that may allow an authenticated local user to escalate privileges. Affected product: Intel NUC Pro Software Suite prior to 2.0.0.3. Root cause: path traversal leading to pr...

CVE-2022-32578

CVE-2022-32578 affects Intel® NUC Pro Software Suite prior to 2.0.0.3. The issue is improper access control that may allow an authenticated local attacker to escalate privileges. According to the Intel advisory and vulnerability records, affected software versions before 2.0.0.3 are at risk of lo...

CVE-2022-34848

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391

CVE-2022-36391 affects Intel NUC Pro Software Suite prior to version 2.0.0.3. The underlying issue is incorrect default permissions which may allow an authenticated user to escalate privileges via local access. Documented impact includes confidentiality, integrity, and availability risks, with lo...

CVE-2022-46656

Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13484 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to incorrect default permissions in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privile...

PT-2023-13083 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2023-13429 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path traversal. Recommendations: For versions prior to 2.0.0.3,...

PT-2023-13426 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to an uncontrolled search path in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privilege...

Intel® NUC Pro Software Suite Advisory

Summary: Potential security vulnerabilities in the Intel® NUC Pro Software Suite may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-46656 Description: Insecure inherited permissions for the...

K20031768: Intel hardware vulnerabilities CVE-2020-8737 CVE-2020-12312

Security Advisory Description CVE-2020-8737 Improper buffer restrictions in the IntelR StratixR 10 FPGA firmware provided with the IntelR QuartusR Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of privilege and/or information disclosure v...

CVE-2022-34757

A CWE-327: Use of a Broken or Risky Cryptographic Algorithm vulnerability exists where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, which may allow an attacker to observe protected communication details. Affected Products: Easergy P5 V01.401.1...

CVE-2022-34757

CVE-2022-34757 affects Schneider Electric Easergy P5 (V01.401.102 and prior). The issue is CWE-327: Use of a Broken or Risky Cryptographic Algorithm, where weak cipher suites can be used for the SSH connection between Easergy Pro software and the device, allowing an attacker to observe protected ...

Schneider Electric Modicon Controllers Reliance On Untrusted Inputs in a Security Decision (CVE-2018-7850)

A CWE-807: Reliance on Untrusted Inputs in a Security Decision vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause invalid information displayed in Unity Pro software. This plugin only works with Tenable.ot. Please visit...

Memory corruption vulnerability exists in Nitro Pro (CNVD-2021-21849)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...

Memory Corruption Vulnerability in Nitro Pro (CNVD-2021-21846)

Nitro pro is a PDF production and management software. A memory corruption vulnerability exists in Nitro Pro. An attacker could exploit this vulnerability to cause the program to crash...