Path Traversal in Intel Audio Install Package
CVE-2023-33878
Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.002 (12.2th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 12.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: 0.000
Affected products
- Intel Audio Install Package
- Intel Nuc P14e Laptop Element Cmcn1cc
- Intel(r) Nuc P14e Laptop Element Audio Install Package Software — versions before version 156 for Windows
Weakness classification (CWE)
References
- www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html (Patch, Vendor Advisory)
Frequently asked questions
- What is CVE-2023-33878?
- CVE-2023-33878 is a medium-severity vulnerability in Intel Audio Install Package, classified under CWE-249. CVSS score: 6.7/10. Published 2023-11-14.
- How severe is CVE-2023-33878?
- Medium severity. CVSS v3 base score is 6.7 out of 10.