PT-2023-7428 · Intel · Intel Nuc P14E Laptop Element

Falconcorruption · Publicado 2023-05-09 · Atualizado 2023-05-19 · CVE-2023-27382

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel NUC P14E Laptop Element software versions prior to 1.0.0.156

Description The issue is related to incorrectly used default permissions in the Audio Service of the Intel NUC P14E Laptop Element software. This could allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 1.0.0.156, update to version 1.0.0.156 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Audio Service to minimize the risk of exploitation.

Correção

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

BDU:2023-08467

CVE-2023-27382

Produtos afetados

Intel Nuc P14E Laptop Element

Referências · 6

• https://osv.dev/vulnerability/CVE-2023-27382 · Aviso do Fabricante
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2023-08467 · Nota de Segurança
• https://t.me/cibsecurity/63750 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-27382 · Nota de Segurança
• https://vuldb.com/ru/?id.228647 · Nota