CVE-2022-46656

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-277 CWE-732

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC Pro Software Suite	before version 2.0.0.3

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00834.htmlVendor Advisory

Timeline

Published: May 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-466589.8The affected product is vulnerable to a stack-based buffer overflow which could lead to a denial of service or remote code execution.CVE-2022-46665.4The Markup (JSON-LD) structured in schema.org WordPress plugin through 4.8.1 does not validate and escape some of its shortcode attributes b CVE-2022-466606.5An unauthorized user could alter or write files with full control over the path and content of the file.CVE-2022-466626.7Roxio Creator LJB starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquote CVE-2022-466637.5In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.CVE-2022-466648.1A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4)CVE-2022-46675.4The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them bac CVE-2022-466706.1Rockwell Automation was made aware of a vulnerability by a security researcher from Georgia Institute of Technology that the MicroLogix 1100 CVE-2022-466755.3Wyse Management Suite Repository 3.8 and below contain an information disclosure vulnerability. A unauthenticated attacker could potentially CVE-2022-466764.9Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A malicious admin user can disable or delete users und CVE-2022-466774.9Wyse Management Suite 3.8 and below contain an improper access control vulnerability with which an custom group admin can create a subgroup CVE-2022-466784.9Wyse Management Suite 3.8 and below contain an improper access control vulnerability. A authenticated malicious admin user can edit genera