CVE-2024-22376

Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Score

CVSS 3.1 6.7 Medium

Status

Deferred - secure@intel.com

Published

2024-08-14

Last modified

2024-08-14

Weaknesses

CWE-427

Affected products

• Ethernet Adapter Complete Driver Pack (Intel)

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html