Lucene search

K
nvd[email protected]NVD:CVE-2023-27509
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-27509

2023-08-1103:15:23
CWE-284
web.nvd.nist.gov
3
access control
intel(r) ispc
privilege escalation
cve-2023-27509

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.0%

Improper access control in some Intelยฎ ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enable escalation of privileges via local access.

Affected configurations

Nvd
Node
intelispc_software_installerRange<1.19.0windows
VendorProductVersionCPE
intelispc_software_installer*cpe:2.3:a:intel:ispc_software_installer:*:*:*:*:*:windows:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-27509