First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-33878

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	Intel(R) NUC P14E Laptop Element Audio Install Package software	before version 156 for Windows
intel_nuc_p14e_laptop_element_audio_install_package_software	intel_nuc_p14e_laptop_element_audio_install_package_software	< before_version_156_for_windows

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.htmlPatch, Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00908.htmlPatch, Vendor Advisory

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-338793.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-33886.1The Beautiful Cookie Consent Banner for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nsc_bar_content_href' parameter in v CVE-2023-338803.3In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileg CVE-2023-338815.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338825.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338835.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338845.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338855.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338865.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338875.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338885.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv CVE-2023-338895.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution priv