CVE-2023-33874

Published: Nov 14, 2023Modified: Jun 17, 2026

7.3

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.3 / Impact: 5.9

Source: NVD

Description

Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected (1)

Products: Intel: Hid Event Filter Driver

Intel

1 product

Hid Event Filter Driver

Configuration A

1 vulnerable · 6 platform

Vulnerable Software	Affected Versions
Intel Hid Event Filter Driver	Before 2.2.2.1

Running on/with	Platform Versions
Intel Nuc 12 Pro Board Nuc12wsbv5	All versions
Intel Nuc 12 Pro Board Nuc12wsbv7	All versions
Intel Nuc 12 Pro Kit Nuc12wshv5	All versions
Intel Nuc 12 Pro Kit Nuc12wshv7	All versions
Intel Nuc 12 Pro Kit Nuc12wskv5	All versions
Intel Nuc 12 Pro Kit Nuc12wskv7	All versions

Related CWEs

CWE-427

Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

References (2)

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html

Source: secure@intel.com

PatchVendor Advisory

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.