[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fWrKhE9dlUU-Tr48QsncDFbQ7yBORCnhvbZ2QPhRH_vg":3,"g5a-risk:CVE-2023-32655":142},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":37,"epssPercentile":26,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":62,"references":63,"referencesCount":70,"weaknesses":71,"weaknessesCount":87,"isActivelyExploited":88,"cisaInfo":26,"otxData":26,"relatedBlogPosts":89,"seoMetadata":90,"configurations":115,"relatedVendorCves":137,"notableEvents":138},"CVE-2023-32655","What is CVE-2023-32655?","Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3 for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.","Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before version 1.0.10.3...","2023-11-14T19:15:26.23","2023-11-20T20:58:37.973",7.3,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","REQUIRED","UNCHANGED","HIGH",null,1.3,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":36,"ImpactScore":28},"secure@intel.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":21,"AttackComplexity":25,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:R\u002FS:U\u002FC:H\u002FI:H\u002FA:H",6.7,"MEDIUM",0.8,0.00221,[37,37,37,37,37,37,37],"High",[41,46,50,53,56,59],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"intel","usb_type_c_power_delivery_controller","*","cpe:2.3:a:intel:usb_type_c_power_delivery_controller:*:*:*:*:*:windows:*:*",{"vendor":42,"product":47,"version":48,"criteria":49,"vulnerable":4},"nuc_8_business_nuc8i7hnkqc","-","cpe:2.3:h:intel:nuc_8_business_nuc8i7hnkqc:-:*:*:*:*:*:*:*",{"vendor":42,"product":51,"version":48,"criteria":52,"vulnerable":4},"nuc_8_enthusiast_nuc8i7hvkva","cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkva:-:*:*:*:*:*:*:*",{"vendor":42,"product":54,"version":48,"criteria":55,"vulnerable":4},"nuc_8_enthusiast_nuc8i7hvkvaw","cpe:2.3:h:intel:nuc_8_enthusiast_nuc8i7hvkvaw:-:*:*:*:*:*:*:*",{"vendor":42,"product":57,"version":48,"criteria":58,"vulnerable":4},"nuc_kit_nuc8i7hnk","cpe:2.3:h:intel:nuc_kit_nuc8i7hnk:-:*:*:*:*:*:*:*",{"vendor":42,"product":60,"version":48,"criteria":61,"vulnerable":4},"nuc_kit_nuc8i7hvk","cpe:2.3:h:intel:nuc_kit_nuc8i7hvk:-:*:*:*:*:*:*:*",6,[64],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fwww.intel.com\u002Fcontent\u002Fwww\u002Fus\u002Fen\u002Fsecurity-center\u002Fadvisory\u002Fintel-sa-00908.html","Intel",[68,69],"Patch","Vendor Advisory",1,[72,80],{"id":73,"name":74,"description":75,"extendedDescription":76,"status":77,"abstraction":78,"structure":79},"CWE-22","Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","Many file operations are intended to take place within a restricted directory. By using special elements such as \"..\" and \"\u002F\" separators, attackers can escape outside of the restricted location to access files or directories that are elsewhere on the system. One of the most common special elements is the \"..\u002F\" sequence, which in most modern operating systems is interpreted as the parent directory of the current location. This is referred to as relative path traversal. Path traversal also covers the use of absolute pathnames such as \"\u002Fusr\u002Flocal\u002Fbin\" to access unexpected files. This is referred to as absolute path traversal.","Stable","Base","Simple",{"id":81,"name":82,"description":83,"extendedDescription":84,"status":85,"abstraction":86,"structure":79},"CWE-249","DEPRECATED: Often Misused: Path Manipulation","This entry has been deprecated because of name\n\tconfusion and an accidental combination of multiple\n\tweaknesses. Most of its content has been transferred to\n\tCWE-785.","This entry was deprecated for several reasons. The primary\n        reason is over-loading of the \"path manipulation\" term and the\n        description. The original description for this entry was the\n        same as that for the \"Often Misused: File System\" item in the\n        original Seven Pernicious Kingdoms paper. However, Seven\n        Pernicious Kingdoms also has a \"Path Manipulation\" phrase that\n        is for external control of pathnames (CWE-73), which is a\n        factor in symbolic link following and path traversal, neither\n        of which is explicitly mentioned in 7PK. Fortify uses the\n        phrase \"Often Misused: Path Manipulation\" for a broader range\n        of problems, generally for issues related to buffer\n        management. Given the multiple conflicting uses of this term,\n        there is a chance that CWE users may have incorrectly mapped\n        to this entry.\nThe second reason for deprecation is an implied combination of\n\tmultiple weaknesses within buffer-handling functions. The\n\tfocus of this entry was generally on the path-conversion\n\tfunctions and their association with buffer\n\toverflows. However, some of Fortify's Vulncat entries have the\n\tterm \"path manipulation\" but describe a non-overflow weakness\n\tin which the buffer is not guaranteed to contain the entire\n\tpathname, i.e., there is information truncation (see CWE-222\n\tfor a similar concept). A new entry for this non-overflow\n\tweakness may be created in a future version of CWE.","Deprecated","Variant",2,false,[],{"title":91,"metaDescription":92,"keywords":93,"canonicalUrl":94,"structuredData":95},"What is CVE-2023-32655? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-32655, a high severity cyber security vulnerability from 2023. Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC...","CVE-2023-32655, CVE-2023-32655 vulnerability, CVE-2023-32655 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, intel security, usb_type_c_power_delivery_controller vulnerability, nuc_8_business_nuc8i7hnkqc vulnerability, nuc_8_enthusiast_nuc8i7hvkva vulnerability, nuc_8_enthusiast_nuc8i7hvkvaw vulnerability, nuc_kit_nuc8i7hnk vulnerability","\u002Fwhat-is\u002Fcve-2023-32655",{"@context":96,"@type":97,"headline":91,"description":92,"datePublished":10,"dateModified":11,"author":98,"publisher":102,"about":106,"mainEntityOfPage":110,"articleSection":113,"keywords":114},"https:\u002F\u002Fschema.org","TechArticle",{"@type":99,"name":100,"url":101},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":99,"name":100,"url":101,"logo":103},{"@type":104,"url":105},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":107,"name":6,"description":108,"additionalType":109},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":111,"@id":112},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-32655","Cybersecurity","CVE-2023-32655, CVE-2023-32655 vulnerability, CVE-2023-32655 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[116],{"Operator":117,"Negate":26,"Nodes":118},"AND",[119,125],{"Operator":120,"Negate":26,"CPEMatch":121},"OR",[122],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":123,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":124,"VersionEndIncluding":26},"0B21EFAA-D473-44AE-9930-0A4256FF7DE7","1.0.10.3",{"Operator":120,"Negate":26,"CPEMatch":126},[127,129,131,133,135],{"Vulnerable":26,"Criteria":49,"MatchCriteriaID":128,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"6041D0C6-BAA8-410B-9AE7-F2E164F04A6C",{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":130,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"F2C17AD1-F813-484D-AC73-4A9BBCE233BB",{"Vulnerable":26,"Criteria":55,"MatchCriteriaID":132,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"C95A2886-F2CC-45A3-8877-AE894FF86898",{"Vulnerable":26,"Criteria":58,"MatchCriteriaID":134,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"244CD6EC-780A-405E-8CFA-666A666FF7D5",{"Vulnerable":26,"Criteria":61,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"1D391590-652D-4B98-89F1-9F31F479448B",[],[],{"lastModified":11,"cacheTime":140,"version":141},1792371345573,"2.0",{"score":143,"band":144,"action":145,"scoredAt":146},45,"Medium","Plan remediation","2026-10-16T06:59:49.315822+00:00"]