Insecure Permissions in HotKey Services for Intel NUC P14E Laptop Software
CVE-2022-41687

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Nuc P14e Laptop Element Software For Windows 10
Vendor
CVE Published:
10 May 2023

What is CVE-2022-41687?

The HotKey Services in certain Intel NUC P14E Laptop Element software versions for Windows 10 contain insecure inherited permissions. This vulnerability can be exploited by an authenticated user with local access, potentially leading to escalation of privileges on the device. Users are advised to update to version 1.1.44 or later to mitigate the risks associated with this vulnerability.

Affected Version(s)

Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.