Lucene search
IntelCVELIST:CVE-2023-39425HistoryFeb 14, 2024 - 1:38 p.m.
CVE-2023-39425
2024-02-1413:38:09
CWE-284
intel
www.cve.org
4
intel
access control
privilege escalation
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0
Percentile
9.0%
Improper access control in some Intel® DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via local access.
CNA Affected
[
{
"vendor": "n/a",
"product": "Intel(R) DSA software",
"versions": [
{
"version": "before version 23.4.33",
"status": "affected"
}
],
"defaultStatus": "unaffected"
}
]Related
vulnrichment
vulnrichment
CVE-2023-39425
2024-02-14 13:38:09
cve
cve
CVE-2023-39425
2024-02-14 14:16:02
prion
prion
Improper access control
2024-02-14 14:16:00
nvd
nvd
CVE-2023-39425
2024-02-14 14:16:02
intel
intel
Intel® DSA Software Advisory
2024-02-13 00:00:00
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
8.9
Confidence
High
EPSS
0
Percentile
9.0%
Related for CVELIST:CVE-2023-39425