Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
References
| Link | Resource |
|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
20 Nov 2023, 20:58
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Intel nuc 8 Enthusiast Nuc8i7hvkva
Intel usb Type C Power Delivery Controller Intel nuc Kit Nuc8i7hvk Intel nuc 8 Enthusiast Nuc8i7hvkvaw Intel nuc Kit Nuc8i7hnk Intel Intel nuc 8 Business Nuc8i7hnkqc |
|
| References | () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html - Patch, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| CWE | CWE-22 | |
| CPE | cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkva:-:*:*:*:*:*:*:* cpe:2.3:a:intel:usb_type_c_power_delivery_controller:*:*:*:*:*:windows:*:* cpe:2.3:h:intel:nuc_kit_nuc8i7hvk:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_8_business_nuc8i7hnkqc:-:*:*:*:*:*:*:* cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkvaw:-:*:*:*:*:*:*:* |
14 Nov 2023, 19:30
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-14 19:15
Updated : 2023-12-10 15:26
NVD link : CVE-2023-32655
Mitre link : CVE-2023-32655
CVE.ORG link : CVE-2023-32655
JSON object : View
Products Affected
intel
- usb_type_c_power_delivery_controller
- nuc_kit_nuc8i7hvk
- nuc_8_business_nuc8i7hnkqc
- nuc_kit_nuc8i7hnk
- nuc_8_enthusiast_nuc8i7hvkvaw
- nuc_8_enthusiast_nuc8i7hvkva