CVEvulnerability

CVE-2022-38103

7.8 HIGH Published 2023-05-10 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-05-10
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-277, CWE-732

Description

Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated user to potentially enable escalation of privilege via local access

Affected configurations

• intel nuc software studio service (< 1.17.38.0)

Weakness · CWE (2)

CWE-277 Insecure Inherited Permissions weakness
CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00854.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00854.html Vendor Advisory

CVE-2022-38103

Description

Affected configurations

Related

Weakness · CWE (2)

References