CVE-2022-38101
Assigner: intel
Published: 2023-05-10T13:17:19.808Z
State: PUBLISHED
problemTypes: descriptions: description: escalation of privilege
description: Uncontrolled search path
cweId: CWE-427
type: CWE
affected: vendor: n/a
product: Intel(R) NUC Chaco Canyon BIOS update software
versions: version: before version iFlashV Windows 5.13.00.2105
status: affected
defaultStatus: unaffected
descriptions: value: Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows 5.13.00.2105 may allow an authenticated user to potentially enable escalation of privilege via local access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH