Uncontrolled Search Path in Intel NUC 12 Pro Kits and Mini PCs
CVE-2023-33874

6.7MEDIUM

Key Information:

Vendor
Intel
Status
Intel(r) Nuc 12 Pro Kits & Mini Pcs - Nuc12ws Intel(r) Hid Event Filter Driver Installation Software
Vendor
CVE Published:
14 November 2023

Summary

An uncontrolled search path vulnerability exists in the Intel NUC 12 Pro Kits and Mini PCs, specifically in the NUC12WS Intel HID Event Filter Driver installation software prior to version 2.2.2.1 for Windows. This vulnerability could allow an authenticated user with local access to potentially escalate privileges on the system, creating risks for data integrity and system operations.

Affected Version(s)

Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.