CVE-2022-41687
Last modified
CVE-2022-41687 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Nuc P14e Laptop Element | < 1.1.44 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-41687?
How severe is CVE-2022-41687?
How do I fix CVE-2022-41687?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-4168Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2022-41680Forma LMS on its 3.1.0 version and earlier is vulnerable to …6.5
- CVE-2022-41681There is a vulnerability on Forma LMS version 3.1.0 and earl…8.8
- CVE-2022-41684A heap out of bounds read vulnerability exists in the OpenIm…5.5
- CVE-2022-41685Multiple Cross-Site Request Forgery (CSRF) vulnerabilities i…8.8
- CVE-2022-41686OpenHarmony-v3.1.2 and prior versions, 3.0.6 and prior versi…4.4
- CVE-2022-41688 Delta Electronics InfraSuite Device Master versions 00.00.0…7.5
- CVE-2022-41689Improper access control in some Intel In-Band Manageability …7.8
- CVE-2022-4169The Theme and plugin translation for Polylang is vulnerable …5.3
- CVE-2022-41690Improper access control in the Intel(R) Retail Edge Mobile i…7.8
- CVE-2022-41691When a BIG-IP Advanced WAF/ASM security policy is configured…7.5
- CVE-2022-41692Missing Authorization vulnerability in Appointment Hour Book…8.8
Are you affected by CVE-2022-41687?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST