What is CVE-2022-41700?

CVE-2022-41700 is a medium-severity vulnerability in Intel Nuc Pro Software Suite, classified under Insecure Inherited Permissions. CVSS score: 6.7/10. Published 2023-11-14.

How severe is CVE-2022-41700?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Privilege escalation in Intel Nuc Pro Software Suite

CVE-2022-41700

Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (6.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Nuc_pro_software_suite
N/a Intel(r) Nuc Pro Software Suite Installation — versions before version 2.0.0.9

Weakness classification (CWE)

CWE-277 — Insecure Inherited Permissions
CWE-732 — Incorrect Permission Assignment for Critical Resource
CWE-269 — Improper Privilege Management

References

secure@intel.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2022-41700?: CVE-2022-41700 is a medium-severity vulnerability in Intel Nuc Pro Software Suite, classified under Insecure Inherited Permissions. CVSS score: 6.7/10. Published 2023-11-14.
How severe is CVE-2022-41700?: Medium severity. CVSS v3 base score is 6.7 out of 10.