7.3

CVE-2023-32658

Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Intel ≫ Hdmi Firmware Version < 1.79.1.1
   Intel ≫ Nuc 7 Business Nuc7i3dnhnc Version -
   Intel ≫ Nuc 7 Business Nuc7i3dnktc Version -
   Intel ≫ Nuc 7 Business Nuc7i5dnkpc Version -
   Intel ≫ Nuc 7 Business Nuc7i5dnkpu Version -
   Intel ≫ Nuc Kit Nuc7i3dnhe Version -
   Intel ≫ Nuc Kit Nuc7i3dnke Version -
   Intel ≫ Nuc Kit Nuc7i5dnhe Version -
   Intel ≫ Nuc Kit Nuc7i5dnke Version -
   Intel ≫ Nuc Kit Nuc7i7dnhe Version -
   Intel ≫ Nuc Kit Nuc7i7dnke Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.095
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Intel 6.7 0.8 5.9
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CWE-428 Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html
Patch
Vendor Advisory