CVE-2023-27517

2024-02-1414:15:47

CWE-284

intel

web.nvd.nist.gov

cve-2023-27517

intel

optane

pmem

software

access control

privilege escalation

nvd

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

EPSS

Percentile

9.0%

JSON

Improper access control in some Intel® Optane™ PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Vulners

Vulnrichment

Node

inteloptane\(tm\)_pmem_softwareRange<01.00.00.3547

inteloptane\(tm\)_pmem_softwareRange<02.00.00.3915

inteloptane\(tm\)_pmem_softwareRange<03.00.00.0483

VendorProductVersionCPE
inteloptane\(tm\)_pmem_software*cpe:2.3:a:intel:optane\(tm\)_pmem_software:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
intel	optane\(tm\)_pmem_software	*	cpe:2.3:a:intel:optane\(tm\)_pmem_software::::::::

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) PMem software",
    "versions": [
      {
        "version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]