CVE-2023-27517

🗓️ 14 Feb 2024 13:38:00Reported by intelType

Improper access control in Intel(R) Optane(TM) PMem software before certain versions may enable privilege escalation via local access

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	Intel Optane PMem Access Control	10 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-27517	6 Mar 202411:11	–	circl
CNNVD	Intel Optane Pmem Security Vulnerability	14 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-27517	14 Feb 202413:38	–	cvelist
Debian CVE	CVE-2023-27517	14 Feb 202413:38	–	debiancve
EUVD	EUVD-2023-31279	3 Oct 202520:07	–	euvd
Intel	Intel® Optane™ PMem Management Software Advisory	13 Feb 202400:00	–	intel
NVD	CVE-2023-27517	14 Feb 202414:15	–	nvd
osv_debian	DEBIAN-CVE-2023-27517	14 Feb 202414:15	–	osv_debian
osv_ubuntu	UBUNTU-CVE-2023-27517	14 Feb 202414:15	–	osv_ubuntu

NVD

Vulners

Vulnrichment

Node

AND

intel optane_persistent_memory_firmwareRange01.00.00.3072–01.00.00.3547

intel nma1xxd128gpsu4Match-

intel nma1xxd128gpsufMatch-

intel nma1xxd256gpsu4Match-

intel nma1xxd256gpsufMatch-

intel nma1xxd512gpsu4Match-

intel nma1xxd512gpsufMatch-

Node

AND

intel optane_persistent_memory_firmwareRange02.00.00.3423–02.00.00.3915

intel nmb1xxd128gpsu4Match-

intel nmb1xxd128gpsufMatch-

intel nmb1xxd256gpsu4Match-

intel nmb1xxd256gpsufMatch-

intel nmb1xxd512gpsu4Match-

intel nmb1xxd512gpsufMatch-

Node

AND

intel optane_persistent_memory_firmwareRange03.00.00.0302–03.00.00.0483

intel nmc2xxd128gpsu4Match-

intel nmc2xxd256gpsu4Match-

intel nmc2xxd512gpsu4Match-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) PMem software",
    "versions": [
      {
        "version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html

17 Jun 2026 05:45Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.6 - 7.8

EPSS0.00218

SSVC

CWE-284