PT-2022-23337 · Intel+1 · Intel Wireless Adapter Driver+2

Published 2022-11-11 · Updated 2023-11-14 · CVE-2022-36377

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs versions prior to 22.190.0.3 Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40

Description The issue is related to insecure inherited permissions in the installation software for some Intel Wireless Adapter drivers, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 22.190.0.3, update to version 22.190.0.3 or later to resolve the issue. For versions prior to 22.40, update to version 22.40 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

CWE-277

Related Identifiers

CVE-2022-36377

Affected Products

Intel Nuc Kit Wireless Adapter Drivers

Intel Wireless Adapter Driver

Windows 10

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-36377 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36377 · Vendor Advisory
• https://t.me/cibsecurity/52938 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html · Note