cbcvebase.
CVE-2023-32272
published 2024-01-19

CVE-2023-32272: Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to…

medium5.5CVSS 3.1
AVLACLPRLUINSUCNINAH
Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.

Affected

5 ranges
VendorProductVersion rangeFixed in
faad2_projectfaad2>= 0 < 2.9.1-1ubuntu0.12.9.1-1ubuntu0.1
faad2_projectfaad2>= 0 < 2.7-8+deb8u3ubuntu0.1~esm12.7-8+deb8u3ubuntu0.1~esm1
faad2_projectfaad2>= 0 < 2.8.0~cvs20150510-1ubuntu0.1+esm12.8.0~cvs20150510-1ubuntu0.1+esm1
faad2_projectfaad2>= 0 < 2.8.8-1ubuntu0.1~esm12.8.8-1ubuntu0.1~esm1
intelnuc_pro_software_suite<= 3.0.0.6

CVSS provenance

nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
osv7.8HIGH
CVE-2023-32272 — Uncontrolled Search Path Element | cvebase