Summaryinfo

A vulnerability has been found in Intel Power Gadget Software on Windwos and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to initialization. This vulnerability is known as CVE-2023-45315. Attacking locally is a requirement. There is no exploit available. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Detailsinfo

A vulnerability, which was classified as critical, was found in Intel Power Gadget Software on Windwos (the affected version is unknown). Affected is an unknown code. The manipulation with an unknown input leads to a initialization vulnerability. CWE is classifying the issue as CWE-665. The product does not initialize or incorrectly initializes a resource, which might leave the resource in an unexpected state when it is accessed or used. This is going to have an impact on availability. CVE summarizes:

Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access.

The advisory is available at intel.com. This vulnerability is traded as CVE-2023-45315 since 11/03/2023. The exploitability is told to be easy. Local access is required to approach this attack. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 05/17/2024).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Intel

Name

• Power Gadget Software

License

• commercial

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion