Lucene search

K
cvelistIntelCVELIST:CVE-2023-34427
HistoryAug 11, 2023 - 2:37 a.m.

CVE-2023-34427

2023-08-1102:37:24
CWE-693
intel
www.cve.org
intel
realsense
id
450
fa
version
0.25.0
vulnerability
protection mechanism
failure
escalation of privilege
local access

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

Protection mechanism failure in some Intel® RealSense™ ID software for Intel® RealSense™ 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA",
    "versions": [
      {
        "version": "version 0.25.0",
        "status": "affected"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

5.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2023-34427