← Back

CVE-2022-36380

nvd nist
Published: Nov 11, 2022Modified: Feb 4, 2025

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.3 / Impact: 5.9
Source: NVD

Description

Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (1)

Intel
1 product
Nuc Kit Wireless Adapter Driver Installer
Configuration A
1 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Nuc Kit Wireless Adapter Driver Installer
Before 22.40.0
Running on/withPlatform Versions
Intel
Nuc 8 Rugged Kit Nuc8cchkr
All versions
Intel
Nuc Board Nuc8cchb
All versions
Intel
Nuc Kit Nuc5pgyh
All versions
Intel
Nuc Kit Nuc5ppyh
All versions
Intel
Nuc Kit Nuc6cayh
All versions
Intel
Nuc Kit Nuc6cays
All versions

Related CWEs

CWE-427
Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

Source: secure@intel.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.