CVE-2023-28388

Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

cpe:2.3:a:intel:chipset_device_software:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:54

Type Values Removed Values Added
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00870.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00870.html - Vendor Advisory
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 6.7

30 Nov 2023, 15:13

Type Values Removed Values Added
First Time Intel
Intel chipset Device Software
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-427
CPE cpe:2.3:a:intel:chipset_device_software:*:*:*:*:*:*:*:*
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00870.html - () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00870.html - Vendor Advisory

14 Nov 2023, 19:30

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-14 19:15

Updated : 2024-11-21 07:54


NVD link : CVE-2023-28388

Mitre link : CVE-2023-28388

CVE.ORG link : CVE-2023-28388


JSON object : View

Products Affected

intel

  • chipset_device_software
CWE
CWE-427

Uncontrolled Search Path Element