MEDIUM · 6.7

CVE-2023-33874

Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user...

Vulnerability Description

Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
IntelHid Event Filter Driver< 2.2.2.1
IntelNuc 12 Pro Board Nuc12Wsbv5-
IntelNuc 12 Pro Board Nuc12Wsbv7-
IntelNuc 12 Pro Kit Nuc12Wshv5-
IntelNuc 12 Pro Kit Nuc12Wshv7-
IntelNuc 12 Pro Kit Nuc12Wskv5-
IntelNuc 12 Pro Kit Nuc12Wskv7-

Related Weaknesses (CWE)

References

FAQ

What is CVE-2023-33874?

CVE-2023-33874 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software before version 2.2.2.1 for Windows may allow an authenticated user...

How severe is CVE-2023-33874?

CVE-2023-33874 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-33874?

Check the references section above for vendor advisories and patch information. Affected products include: Intel Hid Event Filter Driver, Intel Nuc 12 Pro Board Nuc12Wsbv5, Intel Nuc 12 Pro Board Nuc12Wsbv7, Intel Nuc 12 Pro Kit Nuc12Wshv5, Intel Nuc 12 Pro Kit Nuc12Wshv7.