CVE-2023-33874
First published: Tue Nov 14 2023(Updated: )
Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
Credit: secure@intel.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intel Hid Event Filter Driver | <2.2.2.1 | |
| Intel Nuc 12 Pro Board Nuc12wsbv5 | ||
| Intel Nuc 12 Pro Board Nuc12wsbv7 | ||
| Intel Nuc 12 Pro Kit Nuc12wshv5 | ||
| Intel Nuc 12 Pro Kit Nuc12wshv7 | ||
| Intel Nuc 12 Pro Kit Nuc12wskv5 | ||
| Intel Nuc 12 Pro Kit Nuc12wskv7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-33874?
CVE-2023-33874 is a vulnerability that allows an authenticated user to potentially enable escalation of privilege via local access on some Intel(R) NUC 12 Pro Kits & Mini PCs.
How does CVE-2023-33874 affect Intel(R) NUC 12 Pro Kits & Mini PCs?
CVE-2023-33874 affects the installation software before version 2.2.2.1 of the Intel(R) HID Event Filter Driver on Windows, potentially enabling an authenticated user to escalate privilege via local access.
What is the severity of CVE-2023-33874?
CVE-2023-33874 has a severity score of 7.3, which is considered high.
How can an authenticated user exploit CVE-2023-33874?
An authenticated user can exploit CVE-2023-33874 by leveraging the uncontrolled search path vulnerability in the Intel(R) HID Event Filter Driver installation software on Windows.
Is there a fix available for CVE-2023-33874?
Yes, a fix for CVE-2023-33874 is available by updating the Intel(R) HID Event Filter Driver installation software to version 2.2.2.1 or later.
- collector/nvd-api
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/intel
- canonical/intel hid event filter driver
- canonical/intel nuc 12 pro board nuc12wsbv5
- canonical/intel nuc 12 pro board nuc12wsbv7
- canonical/intel nuc 12 pro kit nuc12wshv5
- canonical/intel nuc 12 pro kit nuc12wshv7
- canonical/intel nuc 12 pro kit nuc12wskv5
- canonical/intel nuc 12 pro kit nuc12wskv7