{"id":"CVE-2023-33878","state":"PUBLISHED","title":"Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escala","description":"Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2023-11-14T19:04:48.347Z","updatedAt":"2024-08-30T16:29:49.977Z","severity":{"score":6.7,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","source":"intel"},"assigner":"intel","products":["n/a Intel(R) NUC P14E Laptop Element Audio Install Package software"],"affected":[{"vendor":"n/a","product":"Intel(R) NUC P14E Laptop Element Audio Install Package software","defaultStatus":"unaffected","versions":[{"version":"before version 156 for Windows","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html"],"weaknesses":["CWE-249"],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/33xxx/CVE-2023-33878.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-33878","state":"PUBLISHED","datePublished":"2023-11-14T19:04:48.347Z","dateUpdated":"2024-08-30T16:29:49.977Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2023-06-02T03:00:03.930Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"Intel(R) NUC P14E Laptop Element Audio Install Package software","defaultStatus":"unaffected","versions":[{"version":"before version 156 for Windows","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"},{"cweId":"CWE-249","lang":"en","description":"Path transversal","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2023-11-14T19:04:48.347Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.html","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T15:54:12.670Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"intel_nuc_p14e_laptop_element_audio_install_package_software","product":"intel_nuc_p14e_laptop_element_audio_install_package_software","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"before_version_156_for_windows","versionType":"custom"}],"cpes":["cpe:2.3:a:intel_nuc_p14e_laptop_element_audio_install_package_software:intel_nuc_p14e_laptop_element_audio_install_package_software:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-30T16:15:08.914224Z","id":"CVE-2023-33878","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-30T16:29:49.977Z"}}]}}}