What is CVE-2022-41628?

CVE-2022-41628 is a medium-severity vulnerability in Intel Nuc P14e Laptop Element, classified under Uncontrolled Search Path Element. CVSS score: 6.7/10. Published 2023-05-10.

How severe is CVE-2022-41628?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Nuc P14e Laptop Element

CVE-2022-41628

Uncontrolled search path element in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (6.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Nuc_p14e_laptop_element
Microsoft Windows_10_1507
Microsoft Windows_10_1511
Microsoft Windows_10_1607
Microsoft Windows_10_1703
Microsoft Windows_10_1709
Microsoft Windows_10_1803
Microsoft Windows_10_1809
Microsoft Windows_10_1903
Microsoft Windows_10_1909

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-41628?: CVE-2022-41628 is a medium-severity vulnerability in Intel Nuc P14e Laptop Element, classified under Uncontrolled Search Path Element. CVSS score: 6.7/10. Published 2023-05-10.
How severe is CVE-2022-41628?: Medium severity. CVSS v3 base score is 6.7 out of 10.