7.8

CVE-2022-36377

Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Data is provided by the National Vulnerability Database (NVD)
Intel ≫ Nuc Kit Wireless Adapter Driver Installer SwPlatformwindows_10 Version < 22.40.0
   Intel ≫ Nuc 8 Rugged Kit Nuc8cchkr Version-
   Intel ≫ Nuc Board Nuc8cchb Version-
   Intel ≫ Nuc Kit Nuc5pgyh Version-
   Intel ≫ Nuc Kit Nuc5ppyh Version-
   Intel ≫ Nuc Kit Nuc6cayh Version-
   Intel ≫ Nuc Kit Nuc6cays Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.03% 0.052
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CWE-277 Insecure Inherited Permissions

A product defines a set of insecure permissions that are inherited by objects that are created by the program.