Lucene search

IntelCVE-2023-28385

HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-28385

2023-08-1103:15:24

CWE-285

intel

web.nvd.nist.gov

cve-2023-28385

intel

nuc

pro software suite

windows

authorization

privilege escalation

security vulnerability

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

Improper authorization in the Intel® NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.

Affected configurations

Nvd

Vulners

Node

intelnext_unit_of_computing_firmwareRange<2.0.0.9

AND

microsoftwindowsMatch-

VendorProductVersionCPE
intelnext_unit_of_computing_firmware*cpe:2.3:o:intel:next_unit_of_computing_firmware:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	next_unit_of_computing_firmware	*	cpe:2.3:o:intel:next_unit_of_computing_firmware::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) NUC Pro Software Suite for Windows",
    "versions": [
      {
        "version": "before version 2.0.0.9",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00868.html

CVSS3

8.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-28385