CVE-2023-32660

Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:intel:thunderbolt_3_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*

History

21 Nov 2024, 08:03

Type Values Removed Values Added
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - Patch, Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.3
v2 : unknown
v3 : 6.7

20 Nov 2023, 20:57

Type Values Removed Values Added
First Time Intel thunderbolt 3 Controller Firmware
Intel
Intel nuc Kit Nuc6i7kyk
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.3
CPE cpe:2.3:o:intel:thunderbolt_3_controller_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:intel:nuc_kit_nuc6i7kyk:-:*:*:*:*:*:*:*
CWE CWE-427

14 Nov 2023, 19:30

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-14 19:15

Updated : 2024-11-21 08:03


NVD link : CVE-2023-32660

Mitre link : CVE-2023-32660

CVE.ORG link : CVE-2023-32660


JSON object : View

Products Affected

intel

  • nuc_kit_nuc6i7kyk
  • thunderbolt_3_controller_firmware
CWE
CWE-427

Uncontrolled Search Path Element