CVE-2022-36377

High

Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before…

intel·CWE-277·Published 2022-11-11

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

260 chars

Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

NVDen

260 chars

NVDes

280 chars

Los permisos predeterminados incorrectos en el software de instalación para Intel(r) NUC Kit Wireless Adapter drivers para Windows 10 antes de la versión 22.40 pueden permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	6.7	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H