CVE-2023-25773

EPSS 0.06%
Veröffentlicht 11.08.2023 03:15:18
Zuletzt bearbeitet 21.11.2024 07:50:10
Quelle secure@intel.com
CVE-Watchlists
Login
Unerledigt
Login

Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Intel ≫ Unite SwPlatformwindows Version < 4.2.34962

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.06%	0.185

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
secure@intel.com	7.5	0.8	6	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-25773

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-25773

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-25773

EUVD