CVE-2023-34997 in Server Configuration Utility Software

Résumé

par MITRE • 14/11/2023

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsable: Intel Corporation
• Réserver: 22/06/2023
• Divulgation: 14/11/2023
• Modérer: accepté
• Entrée: VDB-245363
• CPE: prêt
• CWE: CWE-277 (confirmé)
• CVSS: 7.8 (NVD)
• EPSS: 0.00177
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-34997
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-34997
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-34997/