Lucene search

K
nvd[email protected]NVD:CVE-2023-27298
HistoryMay 10, 2023 - 2:15 p.m.

CVE-2023-27298

2023-05-1014:15:32
CWE-427
CWE-428
web.nvd.nist.gov
cve-2023-27298
unauthenticated user
privilege escalation
network access

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

Uncontrolled search path in the WULT software maintained by Intel® before version 1.0.0 (commit id 592300b) may allow an unauthenticated user to potentially enable escalation of privilege via network access.

Affected configurations

NVD
Node
intelwake_up_latency_tracerRange<1.0.0

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.8%

Related for NVD:CVE-2023-27298