CVE-2023-27382
Assigner: intel
Published: 2023-05-10T13:16:40.215Z
State: PUBLISHED
problemTypes: descriptions: description: escalation of privilege
description: Incorrect default permissions
cweId: CWE-276
type: CWE
affected: vendor: n/a
product: Intel(R) NUC P14E Laptop Element software for Windows 10
versions: version: before version 1.0.0.156
status: affected
defaultStatus: unaffected
descriptions: value: Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an authenticated user to potentially enable escalation of privilege via local access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH