PT-2023-19056
CVE-2023-23577
·
Published
2023-08-11
·
Updated
2023-08-23
Description by
CVSS 3.1
7.3
HighMetricsAV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ITE Tech consumer infrared drivers versions prior to 5.5.2.1 for Intel(R) NUC
Description
The issue is related to an uncontrolled search path element in some ITE Tech consumer infrared drivers for Intel(R) NUC, which may allow an authenticated user to potentially enable escalation of privilege via local access.
Recommendations
For versions prior to 5.5.2.1, update to version 5.5.2.1 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾