CVE-2023-32658
Last modified
CVE-2023-32658 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Intel | Hdmi Firmware | < 1.79.1.1 |
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.htmlPatch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.htmlPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-32658?
How severe is CVE-2023-32658?
How do I fix CVE-2023-32658?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-32652 PiiGAB M-Bus does not validate identification strin…6.1
- CVE-2023-32653An out-of-bounds write vulnerability exists in the dcm_pixel…8.8
- CVE-2023-32654A logic issue was addressed with improved state management. …6.5
- CVE-2023-32655Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8…7.3
- CVE-2023-32656Improper buffer restrictions in some Intel(R) RealSense(TM) …7.8
- CVE-2023-32657 Weintek Weincloud v0.13.6 could allow an attacker to …7.5
- CVE-2023-32659 SUBNET PowerSYSTEM Center versions 2020 U10 and prior conta…6.1
- CVE-2023-3266A non-feature complete authentication mechanism exists in th…9.8
- CVE-2023-32660Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK …7.3
- CVE-2023-32661Improper authentication in some Intel(R) NUC Kits NUC7PJYH a…7.8
- CVE-2023-32662Improper authorization in some Intel Battery Life Diagnostic…6.7
- CVE-2023-32663Incorrect default permissions in some Intel(R) RealSense(TM)…7.8
Are you affected by CVE-2023-32658?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST