Lucene search

K
vulnrichmentIntelVULNRICHMENT:CVE-2023-25777
HistoryFeb 14, 2024 - 1:37 p.m.

CVE-2023-25777

2024-02-1413:37:39
CWE-284
intel
github.com
cve-2023-25777
intel thunderbolt
access control
windows
privilege escalation

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Improper access control in some Intel® Thunderbolt™ DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS3

7.9

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H

AI Score

7.1

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-25777