CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28404

CVE-2023-28404 affects Intel Arc and Iris Xe Graphics - WHQL Windows drivers prior to 31.0.101.4255. The issue is an out-of-bounds read in the graphics driver that could allow an authenticated local user to disclose information. The vulnerability is documented across multiple feeds (NVD, Red Hat,...

CVE-2023-25071

CVE-2023-25071 documents a NULL pointer dereference in Intel Graphics Drivers for Intel Arc™ & Iris™ Xe Graphics (WHQL) on Windows. Affects Windows drivers prior to version 31.0.101.4255; successful exploitation by an authenticated local user could enable a denial-of-service condition. Intel advi...

CVE-2023-25071

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

CVE-2023-28401

CVE-2023-28401 affects Intel Arc and Iris Xe Graphics WHQL Windows drivers prior to version 31.0.101.4255, with an out-of-bounds write that could enable local privilege escalation for authenticated users. The vulnerability is documented in multiple sources (NVD, Red Hat, Intel advisory) and speci...

CVE-2023-25952

CVE-2023-25952 : Out-of-bounds write in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software. Root cause: out-of-bounds write. Impact: local denial of service (no confidentiality/in...

CVE-2022-42879

Consolidated view for CVE-2022-42879: A NULL pointer dereference in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software (Windows). Root cause: NULL pointer dereference in the contr...

CVE-2023-29165

CVE-2023-29165 affects Intel Arc™ Control software before version 1.73.5335.2. The issue is an unquoted search path/element that may allow a locally authenticated user to escalate privileges. Red Hat and Intel advisories corroborate the vulnerability and list the affected product as Intel Arc Con...

PT-2023-7284

Name of the Vulnerable Software and Affected Versions IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description The issue is related to an out-of-bounds write in the graphics drivers, which may allow an authenticated user to potentially enable escalatio...

CVE-2023-25071: Use of NullPointerException Catch to Detect NULL Pointer Dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

Intel® Graphics Drivers Advisory

Summary: Potential security vulnerabilities in some Intel® Graphics drivers may allow escalation of privilege, denial of service and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description:...

PT-2023-7283 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description: The issue is related to an out-of-bounds read in the graphics drivers, which may allow an authenticated user to potentially enable...

CVE-2023-28401: Out-of-bounds Write

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

PT-2023-7281

Name of the Vulnerable Software and Affected Versions IntelR ArcTM Control software versions prior to 1.73.5335.2 IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers versions prior to 31.0.101.4255 Description The issue is related to an unquoted search path or element in some Intel software...

PT-2023-7286 · Intel · Intel Arc & Iris Xe Graphics - Whql - Windows Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drivers versions prior to 31.0.101.4255 Description: The issue is related to errors in pointer dereferencing, which can lead to a denial of service. An attacker could potentially exploit this ...

CVE-2023-28404: Out-of-bounds Read

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

Cisco IOX XE unauthenticated OS Command Execution Exploit

msf use auxiliary/admin/http/ciscoiosxeosexeccve202320273 msf auxiliaryciscoiosxeosexeccve202320273 show actions ...actions... msf auxiliaryciscoiosxeosexeccve202320273 set ACTION msf auxiliaryciscoiosxeosexeccve202320273 show options ...show and set options... msf...

Cisco IOX XE unauthenticated Command Line Interface Execution Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOX XE unauthenticated Command Line Interface CLI execution', 'Description' = %q This module leverages CVE-2023-20198 against vulnerable...

Cisco IOX XE Unauthenticated Remote Code Execution Chain Exploit

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOX XE Unauthenticated RCE Chain', 'Description' = %q This module leverages both CVE-2023-20198 and CVE-2023-20273 against vulnerable...

PT-2023-9499 · Cisco · Cisco Ios Xe +1

Name of the Vulnerable Software and Affected Versions: Cisco IOS Software and Cisco IOS XE Software affected versions not specified Description: A vulnerability in the Resource Reservation Protocol RSVP feature could allow an unauthenticated, remote attacker to cause an affected device to reload...