CVE-2023-32661

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 14, 2023
Updated: Nov 20, 2023
CWE ID 287

Summary

CVE-2023-32661 is a vulnerability affecting some Intel(R) NUC Kits, specifically the NUC7PJYH and NUC7CJYH models. The issue lies in the Realtek SD Card Reader Driver installation software, which, prior to version 10.0.19041.29098, contains an improper authentication mechanism. This flaw could potentially enable an authenticated user to escalate their privileges locally, posing a security risk. Users are advised to update their driver software to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share