Description

Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.

Related CPE's

a

intel

ite_tech_consumer_infrared_driver

Vulnerable

h

intel

nuc_11_enthusiast_kit_nuc11phki7c

-

h

intel

nuc_11_enthusiast_mini_pc_nuc11phki7caa

-

References

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html

PatchVendor Advisory

Weaknesses

[email protected]

Primary
CWE-427

[email protected]

Secondary
CWE-427

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

7.3 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-11T03:15:18.233

11 months ago

Last modified

2023-11-07T04:07:46.600

8 months ago