Improper Authorization in Intel NUC Pro Software Suite for Windows
CVE-2023-28385

8.2HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Nuc Pro Software Suite For Windows
Vendor
CVE Published:
11 August 2023

What is CVE-2023-28385?

The Intel NUC Pro Software Suite for Windows is affected by an improper authorization vulnerability, allowing a privileged user to potentially escalate privileges through local access. This could enable unauthorized actions within the affected system, posing a security risk. Users are urged to update to version 2.0.0.9 or later to mitigate the risk associated with this vulnerability.

Affected Version(s)

Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
8.2
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.