Lucene search

IntelCVE-2023-34997

HistoryNov 14, 2023 - 7:15 p.m.

CVE-2023-34997

2023-11-1419:15:28

CWE-277

CWE-732

intel

web.nvd.nist.gov

cve-2023-34997

insecure permissions

installer

intel server configuration utility

escalation of privilege

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd

Vulners

Vulnrichment

Node

intelserver_configuration_utilityRange<16.0.9

VendorProductVersionCPE
intelserver_configuration_utility*cpe:2.3:a:intel:server_configuration_utility:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	server_configuration_utility	*	cpe:2.3:a:intel:server_configuration_utility::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel Server Configuration Utility software",
    "versions": [
      {
        "version": "before version 16.0.9",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00925.html

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-34997