Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html | Patch Vendor Advisory |
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:46
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
| References | () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html - Patch, Vendor Advisory |
23 Aug 2023, 15:45
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html - Patch, Vendor Advisory | |
| First Time |
Intel nuc 11 Enthusiast Kit Nuc11phki7c
Intel nuc 11 Enthusiast Mini Pc Nuc11phki7caa Intel Intel ite Tech Consumer Infrared Driver |
|
| CPE | cpe:2.3:h:intel:nuc_11_enthusiast_mini_pc_nuc11phki7caa:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_11_enthusiast_kit_nuc11phki7c:-:*:*:*:*:*:*:* cpe:2.3:a:intel:ite_tech_consumer_infrared_driver:*:*:*:*:*:*:*:* |
|
| CWE | CWE-427 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
11 Aug 2023, 03:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-11 03:15
Updated : 2024-11-21 07:46
NVD link : CVE-2023-23577
Mitre link : CVE-2023-23577
CVE.ORG link : CVE-2023-23577
JSON object : View
Products Affected
intel
- nuc_11_enthusiast_kit_nuc11phki7c
- nuc_11_enthusiast_mini_pc_nuc11phki7caa
- ite_tech_consumer_infrared_driver
CWE
CWE-427
Uncontrolled Search Path Element