CVE-2022-41314 — Uncontrolled Search Path Element in Intel Administrative Tools FOR Intel Network Adapters

CWE-427 — Uncontrolled Search Path Element3 documents3 sources

Severity

7.8HIGHNVD

CNA6.7

EPSS

0.1%

top 79.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Intel Administrative Tools FOR Intel Network Adapters Intel Non-volatile Memory Update Utility

Timeline

PublishedFeb 16

Description

Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDintel/administrative_tools< 27.3

▶NVDintel/non-volatile_memory_update_utility< 4.01

🔴Vulnerability Details

GHSA

GHSA-9jx4-x9vh-hgrp: Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privi↗2023-02-16

▶

CVEList

CVE-2022-41314: Uncontrolled search path in some Intel(R) Network Adapter installer software may allow an authenticated user to potentially enable escalation of privi↗2023-02-16

▶