CVE-2023-28389

Summary

Incorrect default permissions in some Intel(R) CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected Software

Weaknesses

• escalation of privilege
• CWE-276: Incorrect default permissions

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00923.html
• https://security.netapp.com/advisory/ntap-20240912-0004/

References

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00923.html

• ←Previous
• Next→