Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
El elemento de ruta de búsqueda no controlado en Intel(R) Chipset Device Software anteriores a la versión 10.1.19444.8378 puede permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | HIGH |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Secondary |
en
CWE-427
|
| [email protected] | Primary |
en
CWE-427
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| intel | chipset_device_software | * | <built-in method update of dict object at 0x72a9cc782a80> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:intel:chipset_device_software:*:*:*:*:*:*:*:* |