Null pointer dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

Privilege escalation

Unquoted search path or element in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

Information disclosure

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

Cross site scripting

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28404

CVE-2023-28404 affects Intel Arc and Iris Xe Graphics - WHQL Windows drivers prior to 31.0.101.4255. The issue is an out-of-bounds read in the graphics driver that could allow an authenticated local user to disclose information. The vulnerability is documented across multiple feeds (NVD, Red Hat,...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-25071

CVE-2023-25071 documents a NULL pointer dereference in Intel Graphics Drivers for Intel Arc™ & Iris™ Xe Graphics (WHQL) on Windows. Affects Windows drivers prior to version 31.0.101.4255; successful exploitation by an authenticated local user could enable a denial-of-service condition. Intel advi...

CVE-2023-25071

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

CVE-2023-28401

CVE-2023-28401 affects Intel Arc and Iris Xe Graphics WHQL Windows drivers prior to version 31.0.101.4255, with an out-of-bounds write that could enable local privilege escalation for authenticated users. The vulnerability is documented in multiple sources (NVD, Red Hat, Intel advisory) and speci...

CVE-2023-25952

CVE-2023-25952 : Out-of-bounds write in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software. Root cause: out-of-bounds write. Impact: local denial of service (no confidentiality/in...

CVE-2022-42879

Consolidated view for CVE-2022-42879: A NULL pointer dereference in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software (Windows). Root cause: NULL pointer dereference in the contr...

CVE-2023-29165

CVE-2023-29165 affects Intel Arc™ Control software before version 1.73.5335.2. The issue is an unquoted search path/element that may allow a locally authenticated user to escalate privileges. Red Hat and Intel advisories corroborate the vulnerability and list the affected product as Intel Arc Con...

PT-2023-7283 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description: The issue is related to an out-of-bounds read in the graphics drivers, which may allow an authenticated user to potentially enable...

PT-2023-7286 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drivers versions prior to 31.0.101.4255 Description: The issue is related to errors in pointer dereferencing, which can lead to a denial of service. An attacker could potentially exploit this ...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics drivers may allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description:...

Cisco IOX XE Unauthenticated Remote Code Execution Chain Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOX XE Unauthenticated RCE Chain', 'Description' = %q This module leverages both CVE-2023-20198 and CVE-2023-20273 against vulnerable...

Cisco IOX XE unauthenticated Command Line Interface Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOX XE unauthenticated Command Line Interface CLI execution', 'Description' = %q This module leverages CVE-2023-20198 against vulnerable...

Cisco IOX XE unauthenticated OS Command Execution Exploit

msf use auxiliary/admin/http/ciscoiosxeosexeccve202320273 msf auxiliaryciscoiosxeosexeccve202320273 show actions ...actions... msf auxiliaryciscoiosxeosexeccve202320273 set ACTION msf auxiliaryciscoiosxeosexeccve202320273 show options ...show and set options... msf...

Cisco IOX XE Unauthenticated RCE Chain

This module leverages both CVE-2023-20198 and CVE-2023-20273 against vulnerable instances of Cisco IOS XE devices which have the Web UI exposed. An attacker can execute a payload with root privileges. The vulnerable IOS XE versions are: 16.1.1, 16.1.2, 16.1.3, 16.2.1, 16.2.2, 16.3.1, 16.3.2,...