PT-2024-1326
CVE-2023-29244
·
Published
2024-01-09
·
Updated
2024-01-30
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel NUC P14E Laptop Element versions prior to 5.4.1.4479
Description
The issue is related to incorrect default permissions in the Intel Integrated Sensor Hub (ISH) driver, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could permit an attacker to elevate their privileges.
Recommendations
For versions prior to 5.4.1.4479, update to version 5.4.1.4479 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾