Lucene search

K
nvd[email protected]NVD:CVE-2023-24483
HistoryFeb 16, 2023 - 6:15 p.m.

CVE-2023-24483

2023-02-1618:15:11
CWE-269
web.nvd.nist.gov
vulnerability
local user
privilege elevation
citrix
windows vda

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.

Affected configurations

NVD
Node
microsoftwindowsMatch-
AND
citrixvirtual_apps_and_desktopsRange<2212-
OR
citrixvirtual_apps_and_desktopsMatch1912-ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu1ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu2ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu3ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu4ltsr
OR
citrixvirtual_apps_and_desktopsMatch1912cu5ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203-ltsr
OR
citrixvirtual_apps_and_desktopsMatch2203cu1ltsr

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%