CVE Feed

    Dashboard / CVE / CVE-2022-36377

    CVE-2022-36377

    Insecure inherited permissions in some Intel(R) Wireless Adapter Driver installation software for Intel(R) NUC Kits & Mini PCs before version 22.190.0.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

    Published:Nov 11, 2022
    Last Modified:Feb 5, 2025
    EPS:Nov 11, 2022
    EPSS Score:0.00025
    CVSS Score:6.7

    Affected Products

    Vendor
    Intel
    Product
    Nuc 8 Rugged Kit Nuc8cchkr
    Vendor
    Intel
    Product
    Nuc Board Nuc8cchb
    Vendor
    Intel
    Product
    Nuc Kit Nuc5pgyh
    Vendor
    Intel
    Product
    Nuc Kit Nuc5ppyh
    Vendor
    Intel
    Product
    Nuc Kit Nuc6cayh
    Vendor
    Intel
    Product
    Nuc Kit Nuc6cays
    Vendor
    Intel
    Product
    Nuc Kit Wireless Adapter Driver Installer

    Exploits

    No exploit reference

    Related CVEs

    CVE-2023-32617 (CVSS 8.2) — Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS …
    CVE-2022-38101 (CVSS 6.7) — Uncontrolled search path in some Intel(R) NUC Chaco Canyon BIOS update software before version iFlashV Windows…
    CVE-2023-22312 (CVSS 7.2) — Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable …
    CVE-2022-36380 (CVSS 6.7) — Uncontrolled search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Wind…
    CVE-2022-36384 (CVSS 6.7) — Unquoted search path in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows …
    CVE-2022-36400 (CVSS 6.7) — Path traversal in the installer software for some Intel(r) NUC Kit Wireless Adapter drivers for Windows 10 bef…
    CVE-2022-26124 (CVSS 7.5) — Improper buffer restrictions in BIOS firmware for some Intel(R) NUC Boards, Intel(R) NUC 8 Boards, Intel(R) NU…
    CVE-2021-33086 (CVSS 5.5) — Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable d…
    CVE-2021-0054 (CVSS 6.7) — Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentia…
    CVE-2021-0067 (CVSS 6.7) —  Improper access control in system firmware for some Intel(R) NUCs may allow a privileged user to potenti…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High