First published: Fri Nov 11 2022(Updated: )
Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
Intel NUC Kit Wireless Adapter Driver Installer | <22.40.0 | |
Any of | ||
Intel NUC Rugged Kit NUC8CCHKR | ||
Intel NUC 8 CCHB Firmware | ||
Intel NUC kit NUC5PGYH firmware | ||
Intel NUC 5PPYH | ||
Intel NUC kit nuc6cayh firmware | ||
Intel NUC6CAYS Firmware | ||
Intel NUC Kit Wireless Adapter Driver Installer | <22.40.0 | |
Intel NUC Rugged Kit NUC8CCHKR | ||
Intel NUC 8 CCHB Firmware | ||
Intel NUC kit NUC5PGYH firmware | ||
Intel NUC 5PPYH | ||
Intel NUC kit nuc6cayh firmware | ||
Intel NUC6CAYS Firmware |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-36380 is a vulnerability in the installer software for some Intel NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40.
If you are an authenticated user with local access, CVE-2022-36380 may allow you to potentially enable escalation of privilege.
Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 are affected by CVE-2022-36380.
CVE-2022-36380 has a severity rating of 7.3 (high).
You can find more information about CVE-2022-36380 in the Intel Security Advisory Intel-SA-00747: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00747.html