PT-2023-23265

Name of the Vulnerable Software and Affected Versions IntelR SDP Tool versions prior to 1.4 build 5 Description The issue is related to incorrect default permissions in the IntelR SDP Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local acces...

CVE-2023-27887: Improper Initialization

Improper initialization in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-37336: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUC may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-29494: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28405: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR Distribution of OpenVINOTM Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25773: Improper Access Control

Improper access control in the IntelR UniteR Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22338: Out-of-bounds Read

Out-of-bounds read in some IntelR oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-27879: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-44611: Improper Input Validation

Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2023-24016: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR QuartusR Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-29871: Improper Access Control

Improper access control in the IntelR CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34349: Race Condition During Access to Alternate Channel

Race condition in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22356: Improper Initialization

Improper initialization in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-34438: Race Condition During Access to Alternate Channel

Race condition in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-22449: Improper Input Validation

Improper input validation in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-33877: Out-of-bounds Write

Out-of-bounds write in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-33867: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32656: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34355: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29500: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in BIOS firmware for some IntelR NUCs may allow a privilege user to potentially enable information disclosure via local access...