PT-2024-2523

Name of the Vulnerable Software and Affected Versions IntelR CSME installer software versions prior to 2328.5.5.0 Description The issue is related to incorrect default permissions in some IntelR CSME installer software, which may allow an authenticated user to potentially enable escalation of...

CVE-2023-39941

Improper access control in some IntelR SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-35121

Improper access control in the IntelR oneAPI DPC++/C++ Compiler before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper validation of specified type of input for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

Session fixation

Protection mechanism failure for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-41091

Uncontrolled search path for some IntelR MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-35060

Uncontrolled search path in some IntelR Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-36493: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR SDK for OpenCLTM Applications software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28720: Improper Initialization

Improper initialization for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2023-28745: Uncontrolled Search Path Element

Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-27303: Improper Access Control

Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-30767: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in IntelR Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22293: Improper Access Control

Improper access control in the IntelR ThunderboltTM DCH drivers for Windows may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-41091: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-38561: Improper Access Control

Improper access control in some IntelR XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-31271: Improper Access Control

Improper access control in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34315: Incorrect Default Permissions

Incorrect default permissions in some IntelR VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34351: Buffer Underwrite

Buffer underflow in some IntelR PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-33870: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access...