Lucene search

K
cve[email protected]CVE-2023-39433
HistoryMay 16, 2024 - 9:15 p.m.

CVE-2023-39433

2024-05-1621:15:53
CWE-284
web.nvd.nist.gov
24
cve-2023-39433
privilege escalation
intel cst

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Improper access control for some Intel® CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

Vulners
Node
intelsoftware_managerRange<2.1.10300

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) CST software",
    "versions": [
      {
        "version": "before version 2.1.10300",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for CVE-2023-39433