Lucene search

K
nvd[email protected]NVD:CVE-2023-33877
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-33877

2023-08-1103:15:33
CWE-787
web.nvd.nist.gov
out-of-bounds write
intel realsense
privilege escalation
local access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

9.0%

Out-of-bounds write in some Intel® RealSense™ ID software for Intel® RealSense™ 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Node
intelrealsense_450_fa_firmwareRange0.25.0
AND
intelrealsense_450_faMatch-
VendorProductVersionCPE
intelrealsense_450_fa_firmware*cpe:2.3:o:intel:realsense_450_fa_firmware:*:*:*:*:*:*:*:*
intelrealsense_450_fa-cpe:2.3:h:intel:realsense_450_fa:-:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-33877