Lucene search

IntelVULNRICHMENT:CVE-2023-42667

HistoryAug 14, 2024 - 1:45 p.m.

CVE-2023-42667

2024-08-1413:45:38

CWE-1189

intel

github.com

intel

stream cache

privilege escalation

local access

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CVSS4

7.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/SC:N/VI:H/SI:N/VA:H/SA:N

AI Score

Confidence

High

EPSS

Percentile

9.5%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Improper isolation in the Intel® Core™ Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Intel(R) Core(TM) Ultra Processor stream cache mechanism",
    "versions": [
      {
        "status": "affected",
        "version": "See references"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:intel:core_ultra_processor:*:*:*:*:*:*:*:*"
    ],
    "vendor": "intel",
    "product": "core_ultra_processor",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "microcode-20240813",
        "versionType": "git"
      }
    ],
    "defaultStatus": "unaffected"
  }
]