What is CVE-2023-27382?

CVE-2023-27382 is a medium-severity vulnerability in Intel Nuc P14e Laptop Element, classified under Incorrect Default Permissions. CVSS score: 6.7/10. Published 2023-05-10.

How severe is CVE-2023-27382?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Nuc P14e Laptop Element

CVE-2023-27382

Incorrect default permissions in the Audio Service for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.0.0.156 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.001 (4.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Nuc_p14e_laptop_element
Microsoft Windows_10
N/a Intel(r) Nuc P14e Laptop Element Software For Windows 10 — versions before version 1.0.0.156

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-27382?: CVE-2023-27382 is a medium-severity vulnerability in Intel Nuc P14e Laptop Element, classified under Incorrect Default Permissions. CVSS score: 6.7/10. Published 2023-05-10.
How severe is CVE-2023-27382?: Medium severity. CVSS v3 base score is 6.7 out of 10.