Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html | Patch Vendor Advisory |
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 07:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.7 |
23 Aug 2023, 15:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-427 | |
| First Time |
Intel nuc 11 Enthusiast Kit Nuc11phki7c
Intel nuc 11 Enthusiast Mini Pc Nuc11phki7caa Intel ite Tech Consumer Infrared Driver Intel |
|
| References | (MISC) http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| CPE | cpe:2.3:a:intel:ite_tech_consumer_infrared_driver:*:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_11_enthusiast_mini_pc_nuc11phki7caa:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_11_enthusiast_kit_nuc11phki7c:-:*:*:*:*:*:*:* |
11 Aug 2023, 03:44
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-11 03:15
Updated : 2024-11-21 07:46
NVD link : CVE-2023-23577
Mitre link : CVE-2023-23577
CVE.ORG link : CVE-2023-23577
JSON object : View
Products Affected
intel
- nuc_11_enthusiast_kit_nuc11phki7c
- ite_tech_consumer_infrared_driver
- nuc_11_enthusiast_mini_pc_nuc11phki7caa
CWE
CWE-427
Uncontrolled Search Path Element