{"id":"CVE-2024-22376","state":"PUBLISHED","title":"Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable e","description":"Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.","publishedAt":"2024-08-14T13:45:25.960Z","updatedAt":"2024-08-14T14:05:24.643Z","severity":{"score":5.4,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"intel"},"assigner":"intel","products":["n/a installation software for Intel(R) Ethernet Adapter Driver Pack"],"affected":[{"vendor":"n/a","product":"installation software for Intel(R) Ethernet Adapter Driver Pack","defaultStatus":"unaffected","versions":[{"version":"before version 28.3","status":"affected"}]}],"references":["https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html"],"weaknesses":["CWE-427"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/22xxx/CVE-2024-22376.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-22376","state":"PUBLISHED","datePublished":"2024-08-14T13:45:25.960Z","dateUpdated":"2024-08-14T14:05:24.643Z","assignerShortName":"intel","assignerOrgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateReserved":"2024-03-01T04:00:12.554Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access."}],"affected":[{"vendor":"n/a","product":"installation software for Intel(R) Ethernet Adapter Driver Pack","defaultStatus":"unaffected","versions":[{"version":"before version 28.3","status":"affected"}]}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html","name":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","attackVector":"LOCAL","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"cvssV4_0":{"version":"4.0","baseScore":5.4,"baseSeverity":"MEDIUM","vectorString":"CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","attackVector":"LOCAL","attackComplexity":"HIGH","attackRequirements":"PRESENT","privilegesRequired":"LOW","userInteraction":"ACTIVE","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","subAvailabilityImpact":"NONE"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"escalation of privilege"},{"cweId":"CWE-427","lang":"en","description":"Uncontrolled search path element","type":"CWE"}]}],"providerMetadata":{"shortName":"intel","orgId":"6dda929c-bb53-4a77-a76d-48e79601a1ce","dateUpdated":"2024-08-14T13:45:25.960Z"}},"adp":[{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"intel","product":"ethernet_adapter_complete_driver_pack","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"28.3","versionType":"custom"}],"cpes":["cpe:2.3:h:intel:ethernet_adapter_complete_driver_pack:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-14T14:03:46.747515Z","id":"CVE-2024-22376","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-14T14:05:24.643Z"}}]}}}