CVE-2022-36377

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-36377
Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:nuc_kit_wireless_adapter_driver_installer:*:*:*:*:*:windows_10:*:*
OR cpe:2.3:h:intel:nuc_8_rugged_kit_nuc8cchkr:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_board_nuc8cchb:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5pgyh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc5ppyh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6cayh:-:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6cays:-:*:*:*:*:*:*:*
History

14 Nov 2023, 19:15

Type Values Removed Values Added
Summary Incorrect default permissions in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access. Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
References
  • {'url': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00747.html', 'name': 'https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00747.html', 'tags': ['Vendor Advisory'], 'refsource': 'MISC'}
  • () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html -
Information

Published : 2022-11-11 16:15

Updated : 2024-02-28 19:29

NVD link : CVE-2022-36377

Mitre link : CVE-2022-36377

CVE.ORG link : CVE-2022-36377

JSON object : View

Products Affected

intel

  • nuc_board_nuc8cchb
  • nuc_kit_nuc5pgyh
  • nuc_kit_wireless_adapter_driver_installer
  • nuc_8_rugged_kit_nuc8cchkr
  • nuc_kit_nuc5ppyh
  • nuc_kit_nuc6cays
  • nuc_kit_nuc6cayh
CWE
CWE-276

Incorrect Default Permissions

CWE-277

Insecure Inherited Permissions