CVE-2023-32658 - OpenCVE

Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Intel	Nuc 7 Business Nuc7i3dnktc Nuc 7 Business Nuc7i5dnkpu Nuc Kit Nuc7i7dnhe Nuc Kit Nuc7i3dnhe Nuc 7 Business Nuc7i3dnhnc Nuc Kit Nuc7i7dnke Nuc Kit Nuc7i5dnke Nuc 7 Business Nuc7i5dnkpc Hdmi Firmware Nuc Kit Nuc7i3dnke Nuc Kit Nuc7i5dnhe

Configuration 1 [-]

AND

cpe:2.3:o:intel:hdmi_firmware:*:*:*:*:*:*:*:*

OR	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:::::::*
	cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:::::::*
	cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:::::::*

References

Link	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html	Patch Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: intel

Published: 2023-11-14T19:04:45.847Z

Updated: 2023-11-14T19:04:45.847Z

Reserved: 2023-06-02T03:00:03.850Z

Link: CVE-2023-32658

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-11-14T19:15:26.410

Modified: 2023-11-20T20:58:05.023

Link: CVE-2023-32658

JSON object: View

Redhat Information

No data.

CWE

CWE-428

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:hdmi_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EF6754EE-BF82-445C-9C8D-88E60039FC8A", "versionEndExcluding": "1.79.1.1", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i3dnhnc:-:*:*:*:*:*:*:*", "matchCriteriaId": "3204F73F-448F-4D27-91EC-0B51EDA52563", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i3dnktc:-:*:*:*:*:*:*:*", "matchCriteriaId": "F5A34B36-9883-4614-AA99-909386365342", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpc:-:*:*:*:*:*:*:*", "matchCriteriaId": "97BE736A-7802-4DBC-83EF-DA94C32CFFFA", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_7_business_nuc7i5dnkpu:-:*:*:*:*:*:*:*", "matchCriteriaId": "7904A205-3072-46AB-88E6-3EBEA1E53BD4", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i3dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "3143ABA5-9741-4CD2-AB9A-A7600EA6E32F", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i3dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "97A8937C-5050-436C-B08C-1CA8F1F49FA6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i5dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "8E845C54-797F-4DAC-87ED-D5FDEDBAC5D6", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i5dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "2EF7E820-8567-4E9A-8247-5E1665FFF8BC", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i7dnhe:-:*:*:*:*:*:*:*", "matchCriteriaId": "550295DC-BA99-4A39-AF81-6109D4955B36", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nuc_kit_nuc7i7dnke:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DFDFEB2-B10D-489E-B51C-10FA84E65858", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "La ruta de b\u00fasqueda sin comillas en Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN software de herramienta de actualizaci\u00f3n de firmware HDMI anteriores a la versi\u00f3n 1.79.1.1 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."}], "id": "CVE-2023-32658", "lastModified": "2023-11-20T20:58:05.023", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "secure@intel.com", "type": "Secondary"}]}, "published": "2023-11-14T19:15:26.410", "references": [{"source": "secure@intel.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-428"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-428"}], "source": "secure@intel.com", "type": "Secondary"}]}