CVE-2022-36400: Path Traversal
First published: Fri Nov 11 2022(Updated: )
Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Intel NUC Kit Wireless Adapter Driver Installer | <22.40.0 | |
| Any of | ||
| Intel NUC Rugged Kit NUC8CCHKR | ||
| Intel NUC 8 CCHB Firmware | ||
| Intel NUC kit NUC5PGYH firmware | ||
| Intel NUC 5PPYH | ||
| Intel NUC kit nuc6cayh firmware | ||
| Intel NUC6CAYS Firmware | ||
| Intel NUC Kit Wireless Adapter Driver Installer | <22.40.0 | |
| Intel NUC Rugged Kit NUC8CCHKR | ||
| Intel NUC 8 CCHB Firmware | ||
| Intel NUC kit NUC5PGYH firmware | ||
| Intel NUC 5PPYH | ||
| Intel NUC kit nuc6cayh firmware | ||
| Intel NUC6CAYS Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-36400?
CVE-2022-36400 is a vulnerability in the installer software for some Intel NUC Kit Wireless Adapter drivers for Windows 10 that allows an authenticated user to potentially enable escalation of privilege via local access.
How severe is CVE-2022-36400?
CVE-2022-36400 has a severity rating of 7.8 (high).
Which software versions are affected by CVE-2022-36400?
The vulnerability affects Intel NUC Kit Wireless Adapter driver installer software for Windows 10 versions prior to 22.40.0.
Is Intel NUC 8 Rugged Kit NUC8CCHKR affected by CVE-2022-36400?
No, Intel NUC 8 Rugged Kit NUC8CCHKR is not affected by CVE-2022-36400.
How can I fix CVE-2022-36400?
To fix CVE-2022-36400, update the Intel NUC Kit Wireless Adapter driver installer software to version 22.40.0 or later.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/event
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/intel
- canonical/intel nuc kit wireless adapter driver installer
- canonical/intel nuc rugged kit nuc8cchkr
- canonical/intel nuc 8 cchb firmware
- canonical/intel nuc kit nuc5pgyh firmware
- canonical/intel nuc 5ppyh
- canonical/intel nuc kit nuc6cayh firmware
- canonical/intel nuc6cays firmware