Lucene search

K
cveIntelCVE-2023-31199
HistoryMay 12, 2023 - 3:15 p.m.

CVE-2023-31199

2023-05-1215:15:09
CWE-284
intel
web.nvd.nist.gov
15
cve-2023-31199
intel
solid state drive toolbox
access control
privilege escalation
nvd

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Improper access control in the Intel® Solid State Drive Toolbox™ before version 3.4.5 may allow a privileged user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Vulners
Node
intelsolid_state_drive_toolboxRange<3.4.5
VendorProductVersionCPE
intelsolid_state_drive_toolbox*cpe:2.3:a:intel:solid_state_drive_toolbox:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Solid State Drive Toolbox(TM)",
    "versions": [
      {
        "version": "versions before 3.4.5",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

7.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

EPSS

0

Percentile

9.0%

Related for CVE-2023-31199