Lucene search

K
cveIntelCVE-2023-32543
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2023-32543

2023-08-1103:15:31
CWE-276
intel
web.nvd.nist.gov
18
cve-2023-32543
intel
its software
permissions
escalation of privilege
nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

9.0%

Incorrect default permissions in the Intelยฎ ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Nvd
Vulners
Node
intelintelligent_test_systemRange<3.1
VendorProductVersionCPE
intelintelligent_test_system*cpe:2.3:a:intel:intelligent_test_system:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) ITS sofware",
    "versions": [
      {
        "version": "before version 3.1",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVE-2023-32543