CVE-2022-33963

CWE-276 — Incorrect Default Permissions3 documents3 sources

Severity

7.8HIGH

EPSS

0.1%

top 75.92%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Unite

Timeline

PublishedMay 10

Description

Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4.2.34870 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:HExploitability: 0.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5software_installer_for_intel(r)_unite(r)_client_software_for_windowsbefore version 4.2.34870

▶NVDintel/unite< 4.2.34870

Patches

Patch: www.intel.com ↗Patch: www.intel.com ↗

🔴Vulnerability Details

GHSA

GHSA-p7jh-2rjx-qwfr: Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4↗2023-05-10

▶

CVEList

CVE-2022-33963: Incorrect default permissions in the software installer for Intel(R) Unite(R) Client software for Windows before version 4↗2023-05-10

▶