CVEvulnerability
CVE-2023-23577
7.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-427
Description
Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel ite tech consumer infrared driver (< 5.5.2.1)
Related
Weakness · CWE (1)
- CWE-427 Uncontrolled Search Path Element weakness
References
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html Patch, Vendor Advisory
- http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html Patch, Vendor Advisory