CVE-2023-27517

🗓️ 14 Feb 2024 13:38:00Reported by intelType

Improper access control in Intel(R) Optane(TM) PMem software before certain versions may enable privilege escalation via local access

Reporter	Title	Published	Views	Family All 17
BDU FSTEC	The vulnerability of microprogrammed software for Intel Optane PMem 100 Series, Intel Optane PMem 200 Series, and Intel Optane PMem 300 Series modules arises from lack of access control mechanisms, allowing attackers to exploit their privileges.	10 Apr 202400:00	–	bdu_fstec
Circl	CVE-2023-27517	6 Mar 202411:11	–	circl
CNNVD	Intel Optane Pmem Security Vulnerability	14 Feb 202400:00	–	cnnvd
Cvelist	CVE-2023-27517	14 Feb 202413:38	–	cvelist
Debian CVE	CVE-2023-27517	14 Feb 202413:38	–	debiancve
EUVD	EUVD-2023-31279	3 Oct 202520:07	–	euvd
Intel	Intel® Optane™ PMem Management Software Advisory	13 Feb 202400:00	–	intel
NVD	CVE-2023-27517	14 Feb 202414:15	–	nvd
OSV	DEBIAN-CVE-2023-27517	14 Feb 202414:15	–	osv
OSV	UBUNTU-CVE-2023-27517	14 Feb 202414:15	–	osv

NVD

Vulners

Vulnrichment

Node

intel optane_persistent_memory_firmwareRange01.00.00.3072–01.00.00.3547

AND

intel nma1xxd128gpsu4Match-

intel nma1xxd128gpsufMatch-

intel nma1xxd256gpsu4Match-

intel nma1xxd256gpsufMatch-

intel nma1xxd512gpsu4Match-

intel nma1xxd512gpsufMatch-

Node

intel optane_persistent_memory_firmwareRange02.00.00.3423–02.00.00.3915

AND

intel nmb1xxd128gpsu4Match-

intel nmb1xxd128gpsufMatch-

intel nmb1xxd256gpsu4Match-

intel nmb1xxd256gpsufMatch-

intel nmb1xxd512gpsu4Match-

intel nmb1xxd512gpsufMatch-

Node

intel optane_persistent_memory_firmwareRange03.00.00.0302–03.00.00.0483

AND

intel nmc2xxd128gpsu4Match-

intel nmc2xxd256gpsu4Match-

intel nmc2xxd512gpsu4Match-

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Optane(TM) PMem software",
    "versions": [
      {
        "version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
intel	www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html

20 Feb 2025 15:10Current

6.6Medium risk

Vulners AI Score6.6

CVSS 3.16.6 - 7.8

EPSS0.00058

SSVC

CWE-284