CVE-2022-33963
First published: Wed May 10 2023(Updated: )
Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Unite | <4.2.34870 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-33963.
What is the title of the vulnerability?
The title of the vulnerability is 'Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows'.
What is the description of the vulnerability?
The vulnerability involves incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870, which may allow an authenticated user to potentially enable escalation of privilege via local access.
What is the severity of the vulnerability?
The severity of the vulnerability is high with a CVSS score of 7.8.
What software is affected by the vulnerability?
The Intel Unite(R) Client software for Windows versions before 4.2.34870 are affected.
How can an authenticated user exploit the vulnerability?
An authenticated user with local access can potentially enable escalation of privilege.
Is there a fix available for this vulnerability?
Yes, upgrading to Intel Unite(R) Client software version 4.2.34870 or later will fix the vulnerability.
Where can I find more information about the vulnerability?
More information about the vulnerability can be found at the following link: [https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00782.html](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00782.html)
What is the Common Weakness Enumeration (CWE) ID for the vulnerability?
The Common Weakness Enumeration (CWE) ID for the vulnerability is CWE-276.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/type
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel unite