CVE-2023-27301

CVE-2023-27301 concerns Intel Thunderbolt DCH drivers for Windows prior to v88, with an improper access control flaw that could let an authenticated local user escalate privileges. Public aid in the connected sources indicates the affected product is the Intel Thunderbolt DCH driver for Windows b...

CVE-2023-24463

CVE-2023-24463 affects Intel Thunderbolt DCH drivers for Windows prior to version 88. Root cause: improper input validation in the DCH driver stack. Impact: unauthenticated user could potentially disclose information via adjacent access. Affected product: Intel Thunderbolt DCH driver for Windows ...

CVE-2023-27308

The advisory and associated CVE entries confirm CVE-2023-27308 affects Intel® Thunderbolt™ DCH drivers for Windows before version 88. Root cause: improper buffer restrictions in the driver allow a privileged user to potentially escalate privileges via local access. Impact: local privilege escalat...

CVE-2023-26585

CVE-2023-26585 affects Intel® Thunderbolt™ DCH drivers for Windows before version 88. The issue is due to improper access control, which may allow an authenticated user to cause a denial of service via local access. The referenced sources (NVD/Intel advisory) indicate a base score of 5.0 (Medium)...

CVE-2023-25769

CVE-2023-25769 concerns Intel’s Thunderbolt DCH drivers for Windows prior to version 88, where an authenticated local user can trigger uncontrolled resource consumption potentially leading to a denial of service. The issue stems from the driver’s handling of resources, as described in the Intel a...

CVE-2023-24481

CVE-2023-24481 affects Intel Thunderbolt DCH drivers for Windows prior to v88. The vulnerability is caused by improper access control, potentially allowing an authenticated user to escalate privileges via local access. Affected software/component: Intel Thunderbolt DCH driver for Windows before 8...

CVE-2023-24589

The CVE-2023-24589 issue affects Intel® Thunderbolt™ DCH drivers for Windows before version 88. It is caused by improper buffer restrictions, which could allow a privileged user to escalate privileges via local access. Impact is elevation of privilege (local) with a Medium CVSS score of 6.1. Affe...

CVE-2023-24542

CVE-2023-24542 affects Intel Thunderbolt DCH drivers for Windows prior to version 88. Root cause: unquoted search path/element. Impact: authenticated local user can potentially escalate privileges. Affected products: Intel Thunderbolt DCH drivers for Windows before 88. Mitigation: update to versi...

CVE-2023-22342

Intel Thunderbolt DCH drivers for Windows prior to version 88 are affected by CVE-2023-22342 due to improper input validation in the driver, which may allow an authenticated local user to escalate privileges. The affected component is the Intel Thunderbolt DCH driver for Windows, with the issue d...

CVE-2023-25779

CVE-2023-25779 details Intel Thunderbolt DCH drivers for Windows prior to version 88 contain an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Red Hat and other feeds corroborate the issue and specify the affected product as the Inte...

CVE-2023-25777

CVE-2023-25777 describes improper access control in Intel Thunderbolt DCH drivers for Windows prior to version 88, enabling an authenticated local user to potentially escalate privileges. Supported sources confirm the affected component as the Intel Thunderbolt DCH driver for Windows and identify...

CVE-2023-22293

CVE-2023-22293 affects Intel® Thunderbolt™ DCH driver for Windows before version 88. The vulnerability is due to improper access control, potentially allowing an authenticated local user to escalate privileges. Affected products include Intel Thunderbolt DCH drivers on 6th–9th Gen Intel® Core sys...

CVE-2023-6441

The CVE-2023-6441 entry concerns the UNI-PA University Information System, where an SQL Injection flaw arises from improper neutralization of special elements. Affected products/versions: University Information System prior to 12.12.2023. Impact is described (per sources) as high for confidential...

CVE-2024-23789

The CVE-2024-23789 issue affects SHARP Energy Management Controller with Cloud Services (JH-RVB1 / JH-RV11) versions B0.1.9.1 and earlier. Affected component is the OS command execution via a network-adjacent, unauthenticated attacker. The Red Hat/Red team documents corroborate “OS command inject...

Path traversal

Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to obtain an arbitrary file in the affected product...

CVE-2024-23788

CVE-2024-23788 affects Sharp Energy Management Controller with Cloud Services (JH-RV11/B0.1.9.1 and earlier). The issue is a server-side request forgery (SSRF) allowing a network-adjacent, unauthenticated attacker to send arbitrary HTTP GET requests from the affected device. Impact is high for co...

CVE-2024-23787

The SHARP Energy Management Controller with Cloud Services (models JH-RVB1 / JH-RV11) versions B0.1.9.1 and earlier are affected by a path traversal vulnerability that allows a network-adjacent, unauthenticated attacker to obtain arbitrary files outside the web root. Root cause: improper handling...

CVE-2024-23786

CVE-2024-23786 affects the Sharp Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11, Ver.B0.1.9.1 and earlier). The vulnerability is a stored cross-site scripting issue that allows a network-adjacent unauthenticated attacker to cause arbitrary script execution in a user’s browser w...

CVE-2024-23784

The CVE-2024-23784 issue affects SHARP Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11) up to Ver.B0.1.9.1, where improper access control could allow a network-adjacent, unauthenticated attacker to view a username and its hashed password on the product’s management page. The SHA...

CVE-2024-23783

CVE-2024-23783 affects Sharp Energy Management Controller with Cloud Services (JH-RVB1/JH-RV11) up to Ver.B0.1.9.1. The vulnerability is described as improper authentication allowing a network-adjacent unauthenticated attacker to access the product without authentication. Public sources in the co...