Lucene search

IntelVULNRICHMENT:CVE-2023-40067

HistoryAug 14, 2024 - 1:45 p.m.

CVE-2023-40067

2024-08-1413:45:40

CWE-252

intel

github.com

cve-2023-40067

unchecked return value

intel csme

privilege escalation

physical access

CVSS3

5.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N

CVSS4

5.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:N/SC:L/VI:H/SI:H/VA:N/SA:N

AI Score

7.6

Confidence

High

EPSS

Percentile

9.5%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Unchecked return value in firmware for some Intel® CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:intel:converged_security_management_engine_firmware:-:*:*:*:*:*:*:*"
    ],
    "vendor": "intel",
    "product": "converged_security_management_engine_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "15.0.49",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "15.40.34",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "0",
        "lessThan": "16.1.32",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html

CVSS3

5.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:N

CVSS4

5.7

Attack Vector

PHYSICAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:N/SC:L/VI:H/SI:H/VA:N/SA:N

AI Score

7.6

Confidence

High

EPSS

Percentile

9.5%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Related for VULNRICHMENT:CVE-2023-40067