{"id":"CVE-2023-32272","state":"PUBLISHED","title":"Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable de","description":"Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access.","publishedAt":"2024-01-19T20:03:12.623Z","updatedAt":"2025-06-17T21:19:22.856Z","severity":{"score":7.9,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel NUC Pro Software Suite Configuration Tool software installers"],"affected":[{"vendor":"n/a","product":"Intel NUC Pro Software Suite Configuration Tool software installers","defaultStatus":"unaffected","versions":[{"version":"before version 3.0.0.6","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/32xxx/CVE-2023-32272.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-32272","state":"PUBLISHED","datePublished":"2024-01-19T20:03:12.623Z","dateUpdated":"2025-06-17T21:19:22.856Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2023-05-11T03:00:02.624Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path in some Intel NUC Pro Software Suite Configuration Tool software installers before version 3.0.0.6 may allow an authenticated user to potentially enable denial of service via local access."}],"affected":[{"vendor":"n/a","product":"Intel NUC Pro Software Suite Configuration Tool software installers","defaultStatus":"unaffected","versions":[{"version":"before version 3.0.0.6","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":7.9,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"denial of service"},{"cweId":"CWE-427","lang":"en","description":"Uncontrolled search path","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2024-01-19T20:03:12.623Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T15:10:24.377Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-32272","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-01-20T22:45:23.554999Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-17T21:19:22.856Z"}}]}}}