Uncontrolled Search Path Element in Intel NUC P14E Laptop Software
CVE-2022-41628

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc P14e Laptop Element Software For Windows 10
Vendor
CVE Published:
10 May 2023

What is CVE-2022-41628?

An issue has been identified in the HotKey Services associated with the Intel NUC P14E Laptop Element software for Windows 10. This vulnerability allows an authenticated user to exploit an uncontrolled search path element, which could potentially lead to an escalation of privileges through local access. Users are urged to update to the latest version of the software to mitigate this risk.

Affected Version(s)

Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.