PT-2023-23940
CVE-2023-32660
·
تاريخ النشر
2023-11-14
·
تاريخ التحديث
2023-11-20
الوصف من
CVSS 3.1
7.3
عاليةالمقاييسAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool versions prior to 46
Description
The issue is related to an uncontrolled search path in the installation software of the Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool. This may allow an authenticated user to potentially enable escalation of privilege via local access.
Recommendations
For versions prior to 46, update to version 46 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾