Lucene search
IntelCVE-2023-33870HistoryFeb 14, 2024 - 2:15 p.m.
CVE-2023-33870
2024-02-1414:15:55
CWE-277
intel
web.nvd.nist.gov
7
cve-2023-33870
insecure permissions
intel ethernet
privilege escalation
nvd
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Insecure inherited permissions in some Intel® Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) Ethernet tools and driver install software",
"versions": [
{
"version": "See references",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
nvd
nvd
CVE-2023-33870
2024-02-14 14:15:55
cvelist
cvelist
CVE-2023-33870
2024-02-14 13:38:15
vulnrichment
vulnrichment
CVE-2023-33870
2024-02-14 13:38:15
prion
prion
Privilege escalation
2024-02-14 14:15:00
intel
intel
Intel® Ethernet Tools and Driver Install Software Advisory
2024-02-13 00:00:00
CVSS3
6.7
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS
0
Percentile
9.0%
Related for CVE-2023-33870