CVE-2022-41700 in NUC Pro Software Suite Installation Software

Résumé

par MITRE • 14/11/2023

Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsable: Intel Corporation
• Réserver: 29/09/2022
• Divulgation: 14/11/2023
• Modérer: accepté
• Entrée: VDB-245290
• CPE: prêt
• CWE: CWE-277 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00167
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-41700
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-41700
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-41700/