What is CVE-2023-32658?

CVE-2023-32658 is a medium-severity vulnerability in Intel Hdmi_firmware, classified under Unquoted Search Path or Element. CVSS score: 6.7/10. Published 2023-11-14.

How severe is CVE-2023-32658?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Intel Hdmi_firmware

CVE-2023-32658

Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

EPSS: 0.002 (9.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Hdmi_firmware
Intel Nuc_7_business_nuc7i3dnhnc
Intel Nuc_7_business_nuc7i3dnktc
Intel Nuc_7_business_nuc7i5dnkpc
Intel Nuc_7_business_nuc7i5dnkpu
Intel Nuc_kit_nuc7i3dnhe
Intel Nuc_kit_nuc7i3dnke
Intel Nuc_kit_nuc7i5dnhe
Intel Nuc_kit_nuc7i5dnke
Intel Nuc_kit_nuc7i7dnhe

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

secure@intel.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32658?: CVE-2023-32658 is a medium-severity vulnerability in Intel Hdmi_firmware, classified under Unquoted Search Path or Element. CVSS score: 6.7/10. Published 2023-11-14.
How severe is CVE-2023-32658?: Medium severity. CVSS v3 base score is 6.7 out of 10.