CVE-2023-32660

Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:thunderbolt_3_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*

History

20 Nov 2023, 20:57

Type Values Removed Values Added
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - Patch, Vendor Advisory
CWE CWE-427
First Time Intel thunderbolt 3 Controller Firmware
Intel
Intel nuc Kit Nuc6i7kyk
CPE cpe:2.3:o:intel:thunderbolt_3_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.3

14 Nov 2023, 19:30

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-14 19:15

Updated : 2024-02-28 20:54


NVD link : CVE-2023-32660

Mitre link : CVE-2023-32660

CVE.ORG link : CVE-2023-32660


JSON object : View

Products Affected

intel

  • thunderbolt_3_controller_firmware
  • nuc_kit_nuc6i7kyk
CWE
CWE-427

Uncontrolled Search Path Element