Escalation of Privilege Vulnerability in Intel NUC Pro Software Suite
CVE-2022-34848

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc Pro Software Suite
Vendor
CVE Published:
10 May 2023

What is CVE-2022-34848?

An issue in the Intel NUC Pro Software Suite prior to version 2.0.0.3 presents an unchecked search path scenario, which may enable an authenticated user to enhance their privileges locally. This vulnerability highlights potential risks where malicious users could leverage access to the software for unauthorized privilege escalation. It is essential for users to update to the latest version to mitigate this risk.

Affected Version(s)

Intel(R) NUC Pro Software Suite before version 2.0.0.3

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.