CVE-2022-41628
Assigner: intel
Published: 2023-05-10T13:16:39.615Z
State: PUBLISHED
problemTypes: descriptions: description: escalation of privilege
description: Uncontrolled search path element
cweId: CWE-427
type: CWE
affected: vendor: n/a
product: Intel(R) NUC P14E Laptop Element software for Windows 10
versions: version: before version 1.1.44
status: affected
defaultStatus: unaffected
descriptions: value: Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH