{"id":"CVE-2023-38541","aliases":["EUVD-2023-42340","GHSA-3gqv-8h4q-fff4"],"status":"published","title":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some...","description":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00131,"percentile":0.027,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-277","CWE-732"],"published":"2024-01-19T20:03:14Z","modified":"2026-06-17T06:10:41Z","products":[{"vendor":"intel","product":"hid_event_filter_driver"}],"references":[{"url":"https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00964.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38541"},{"url":"https://github.com/advisories/GHSA-3gqv-8h4q-fff4"}],"sources":{"cve":[{"id":"CVE-2023-38541","description":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-01-19T20:03:14.049Z","modified":"2025-06-17T21:19:23.18Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-277"],"updated_at":"2026-11-02T14:35:29.772612Z"}],"euvd":[{"id":"EUVD-2023-42340","description":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-01-19T20:03:14Z","modified":"2025-06-17T21:19:23Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T20:32:21.000623Z"}],"ghsa":[{"id":"GHSA-3gqv-8h4q-fff4","title":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some...","description":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-01-19T21:30:35Z","modified":"2024-01-30T15:30:21Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-277","CWE-732"],"updated_at":"2026-11-02T14:55:30.717237Z"}],"nvd":[{"id":"CVE-2023-38541","description":"Insecure inherited permissions in some Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.","status":"published","published":"2024-01-19T20:15:10.627Z","modified":"2026-06-17T06:10:41.213Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-277","CWE-732"],"updated_at":"2026-11-02T14:09:01.900189Z"}]}}
