CVE-2023-27517

🗓️ 14 Feb 2024 13:38:00Reported by intelType

Improper access control in Intel(R) Optane(TM) PMem software before certain versions may enable privilege escalation via local access

Reporter	Title	Published	Views	Family All 16
Circl	CVE-2023-27517	6 Mar 202411:11	–	circl
CNNVD	Intel Optane Pmem Security Vulnerability	14 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-27517	14 Feb 202413:38	–	cvelist
Debian CVE	CVE-2023-27517	14 Feb 202413:38	–	debiancve
EUVD	EUVD-2023-31279	3 Oct 202520:07	–	euvd
Intel	Intel® Optane™ PMem Management Software Advisory	13 Feb 202400:00	–	intel
NVD	CVE-2023-27517	14 Feb 202414:15	–	nvd
OSV	DEBIAN-CVE-2023-27517	14 Feb 202414:15	–	osv
OSV	UBUNTU-CVE-2023-27517	14 Feb 202414:15	–	osv
Prion	Improper access control	14 Feb 202414:15	–	prion

NVD

Vulners

Vulnrichment

Node

intel optane_persistent_memory_firmwareRange01.00.00.3072–01.00.00.3547

AND

intel nma1xxd128gpsu4Match-

intel nma1xxd128gpsufMatch-

intel nma1xxd256gpsu4Match-

intel nma1xxd256gpsufMatch-

intel nma1xxd512gpsu4Match-

intel nma1xxd512gpsufMatch-

Node

intel optane_persistent_memory_firmwareRange02.00.00.3423–02.00.00.3915

AND

intel nmb1xxd128gpsu4Match-

intel nmb1xxd128gpsufMatch-

intel nmb1xxd256gpsu4Match-

intel nmb1xxd256gpsufMatch-

intel nmb1xxd512gpsu4Match-

intel nmb1xxd512gpsufMatch-

Node

intel optane_persistent_memory_firmwareRange03.00.00.0302–03.00.00.0483

AND

intel nmc2xxd128gpsu4Match-

intel nmc2xxd256gpsu4Match-

intel nmc2xxd512gpsu4Match-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) PMem software",
    "versions": [
      {
        "version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html

20 Feb 2025 15:10Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.6 - 7.8

EPSS0.00058

SSVC

CWE-284