CVE-2023-33870

Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:intel:administrative_tools_for_intel_network_adapters:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:ethernet_connections_boot_utility\,_preboot_images\,_and_efi_drivers:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:06

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 6.7
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html - Vendor Advisory () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html - Vendor Advisory

25 Oct 2024, 13:51

Type Values Removed Values Added
CWE CWE-732
References () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html - () https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00993.html - Vendor Advisory
CVSS v2 : unknown
v3 : 6.7
v2 : unknown
v3 : 7.8
First Time Intel
Intel administrative Tools For Intel Network Adapters
Intel ethernet Connections Boot Utility\, Preboot Images\, And Efi Drivers
CPE cpe:2.3:a:intel:ethernet_connections_boot_utility\,_preboot_images\,_and_efi_drivers:*:*:*:*:*:*:*:*
cpe:2.3:a:intel:administrative_tools_for_intel_network_adapters:*:*:*:*:*:*:*:*

14 Feb 2024, 14:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-02-14 14:15

Updated : 2024-11-21 08:06


NVD link : CVE-2023-33870

Mitre link : CVE-2023-33870

CVE.ORG link : CVE-2023-33870


JSON object : View

Products Affected

intel

  • administrative_tools_for_intel_network_adapters
  • ethernet_connections_boot_utility\,_preboot_images\,_and_efi_drivers
CWE
CWE-277

Insecure Inherited Permissions

CWE-732

Incorrect Permission Assignment for Critical Resource