Description

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

Related CPE's

a

intel

ite_tech_consumer_infrared_driver

Vulnerable

h

intel

nuc_11_enthusiast_kit_nuc11phki7c

-

h

intel

nuc_11_enthusiast_mini_pc_nuc11phki7caa

-

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html

PatchVendor Advisory

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html

PatchVendor Advisory

Weaknesses

[email protected]

Secondary
CWE-427

[email protected]

Primary
CWE-427

CVSS impact metrics

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

6.7 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-11T01:15:18.233Z

2 years ago

Last modified

2024-11-21T06:46:27.793Z

1 year ago