CVE-2023-25944 in VCUST Tool Software

Résumé

par MITRE • 11/08/2023

Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsable: Intel Corporation
• Réserver: 24/02/2023
• Divulgation: 11/08/2023
• Modérer: accepté
• Entrée: VDB-236875
• CPE: prêt
• CWE: CWE-427 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00150
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-25944
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-25944
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-25944/