Lucene search

K
cve[email protected]CVE-2023-27298
HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-27298

2023-05-1014:15:32
CWE-428
CWE-427
web.nvd.nist.gov
32
cve-2023-27298
uncontrolled search path
wult software
intel
privilege escalation
nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

Uncontrolled search path in the WULT software maintained by Intel® before version 1.0.0 (commit id 592300b) may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected configurations

Vulners
NVD
Node
intelwake_up_latency_tracerRange<1.0.0
OR
intelwake_up_latency_tracerRange<592300

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "WULT software maintained by Intel(R)",
    "versions": [
      {
        "version": "before version 1.0.0 (commit id 592300b)",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.0%

Related for CVE-2023-27298