Race condition in Intel products - CVE-2023-49603

Vulnerability identifier: #VU103963

CSH Severity: Low

CVSS v4: 5 [CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H]

CVE-ID: CVE-2023-49603

CWE-ID: CWE-362

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition. A local administrator can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Intel System Security Report and System Resource Defense (PPAM)
11th Generation Intel Core Processors
12th Generation Intel Core Processors
Intel Pentium Gold Processor Series
Intel Celeron Processors
10th Generation Intel Core Processors
OptiPlex 5400 All-In-One
OptiPlex 7400 All-In-One
Precision 3280 CFF
OptiPlex Micro 7020
OptiPlex SFF 7020
OptiPlex Tower 7020
Inspiron 14 Plus 7440
Inspiron 16 Plus 7640
Latitude 7030 Rugged Extreme
Latitude 3540
Latitude 3440
Latitude 3340
Precision 7680
Precision 7780
Latitude 5440
Latitude 7230 Rugged Extreme
Alienware Aurora R13
Vostro 5320
XPS 8950
Inspiron 13 5320
Inspiron 14 7420 2-in-1
Inspiron 16 7620 2-in-1
Dell G5 5000
Inspiron 5410 All-In-One
Inspiron 7710 All-in-One
Latitude 3330
Vostro 5620
XPS 13 9315
Inspiron 14 5420
Inspiron 16 5620
Latitude 9330
Latitude 5310
Latitude 5310 2-IN-1
Inspiron 14 Plus 7420
Vostro 7620
XPS 13 9305
Precision 7770
Inspiron 16 Plus 7620
Latitude 5530
Precision 3570
Latitude 5430
Latitude 5330
Precision 7670
Vostro 3910
ChengMing 3900
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower
Vostro 3710
OptiPlex XE4 SFF
OptiPlex XE4 Tower
Precision 3470
Precision 3571
Precision 5470
Latitude 5531
Latitude 5431
Inspiron 3910
OptiPlex 5080
Latitude 7530
Latitude 7430
Latitude 9430
Precision 5570
XPS 15 9520
Latitude 7330
XPS 17 9720
Precision 5770
Precision 3440
Precision 3450
Vostro 3690
OptiPlex 7090 Tower
OptiPlex 7080
Vostro 3890
Inspiron 3891
Vostro 5880
Vostro 5890
Inspiron 7501
Inspiron 7500
Vostro 7500
Inspiron 3881
Inspiron 3880
ChengMing 3991
ChengMing 3990
Latitude 3410
Latitude 3510
Latitude 5510
Latitude 7330 Rugged Laptop
Precision 3550
Latitude 5430 Rugged Laptop
Latitude 5410
Latitude 9510 2in1
XPS 15 9500
XPS 17 9700
Precision 5550
Precision 5750
Latitude 5411
Latitude 9410
Latitude 5511
Precision 3551
Precision 5560
Latitude 7410
Latitude 7310
XPS 15 9510
Latitude 7210 2-in-1
OptiPlex 3280 All-in-One
Precision 7550
Latitude 9420
Precision 7750
OptiPlex 7490 All-in-One
OptiPlex 5490 All-In-One
OptiPlex 7780 All-in-One
Latitude 5421
Precision 3640
Latitude 7320 Detachable
Latitude 9520
Precision 7760
Precision 7560
Latitude 7520
Latitude 7420
Latitude 7320
Latitude 5420
XPS 9320
Precision 3660
XPS 8940
OptiPlex 3080
XPS 13 9310 2-in-1
Vostro 3888
Vostro 3881
Vostro 3681
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor
Precision 3260 XE Compact / Precision 3260 Compact
Precision 3240 Compact

Install updates from vendor's website.

OptiPlex 5400 All-In-One - update to 1.1.46
OptiPlex 7400 All-In-One - update to 1.1.46
Precision 3280 CFF - update to 1.10.0
OptiPlex Micro 7020 - update to 1.12.0
OptiPlex SFF 7020 - update to 1.12.0
OptiPlex Tower 7020 - update to 1.12.0
Inspiron 14 Plus 7440 - update to 1.12.0
Inspiron 16 Plus 7640 - update to 1.12.0
Latitude 7030 Rugged Extreme - update to 1.13.3
Latitude 3540 - update to 1.19.1
Latitude 3440 - update to 1.19.1
Latitude 3340 - update to 1.19.1
Precision 7680 - update to 1.19.2
Precision 7780 - update to 1.19.2
Latitude 5440 - update to 1.20.2
Latitude 7230 Rugged Extreme - update to 1.22.2
Alienware Aurora R13 - update to 1.23.0
Vostro 5320 - update to 1.23.0
XPS 8950 - update to 1.23.0
Inspiron 13 5320 - update to 1.23.0
Inspiron 14 7420 2-in-1 - update to 1.25.0
Inspiron 16 7620 2-in-1 - update to 1.25.0
Dell G5 5000 - update to 1.25.1
Inspiron 5410 All-In-One - update to 1.26.0
Inspiron 7710 All-in-One - update to 1.26.0
Latitude 3330 - update to 1.26.0
Vostro 5620 - update to 1.26.0
XPS 13 9315 - update to 1.26.0
Inspiron 14 5420 - update to 1.26.0
Inspiron 16 5620 - update to 1.26.0
Latitude 9330 - update to 1.26.1
Latitude 5310 - update to 1.26.1
Latitude 5310 2-IN-1 - update to 1.26.1
Inspiron 14 Plus 7420 - update to 1.27.0
Vostro 7620 - update to 1.27.0
XPS 13 9305 - update to 1.27.0
Precision 7770 - update to 1.27.0
Inspiron 16 Plus 7620 - update to 1.27.0
Latitude 5530 - update to 1.27.0
Precision 3570 - update to 1.27.0
Latitude 5430 - update to 1.27.0
Latitude 5330 - update to 1.27.0
Precision 7670 - update to 1.27.0
Vostro 3910 - update to 1.28.0
ChengMing 3900 - update to 1.28.0
OptiPlex 5000 Micro / OptiPlex 5000 Small Form Factor / OptiPlex 5000 Tower - update to 1.28.0
OptiPlex 7000 Micro / OptiPlex 7000 Small Form Factor / OptiPlex 7000 Tower / OptiPlex 7000 XE Micro - update to 1.28.0
OptiPlex 3000 Micro / OptiPlex 3000 Small Form Factor / OptiPlex 3000 Tower - update to 1.28.0
Vostro 3710 - update to 1.28.0
OptiPlex XE4 SFF - update to 1.28.0
OptiPlex XE4 Tower - update to 1.28.0
Precision 3470 - update to 1.28.0
Precision 3571 - update to 1.28.0
Precision 5470 - update to 1.28.0
Latitude 5531 - update to 1.28.0
Latitude 5431 - update to 1.28.0
Inspiron 3910 - update to 1.28.0
OptiPlex 5080 - update to 1.28.1
Latitude 7530 - update to 1.29.0
Latitude 7430 - update to 1.29.0
Latitude 9430 - update to 1.29.0
Precision 5570 - update to 1.29.0
XPS 15 9520 - update to 1.29.0
Latitude 7330 - update to 1.29.0
XPS 17 9720 - update to 1.30.1
Precision 5770 - update to 1.30.1
Precision 3440 - update to 1.31.0
Precision 3450 - update to 1.31.0
Vostro 3690 - update to 1.31.0
OptiPlex 7090 Tower - update to 1.31.0
OptiPlex 7080 - update to 1.31.0
Vostro 3890 - update to 1.31.0
Inspiron 3891 - update to 1.31.0
Vostro 5880 - update to 1.31.0
Vostro 5890 - update to 1.31.0
Inspiron 7501 - update to 1.31.1
Inspiron 7500 - update to 1.31.1
Vostro 7500 - update to 1.31.1
Inspiron 3881 - update to 1.31.1
Inspiron 3880 - update to 1.31.1
ChengMing 3991 - update to 1.31.1
ChengMing 3990 - update to 1.31.1
Precision 3240 Compact - update to 1.32.1
Latitude 3410 - update to 1.32.1
Latitude 3510 - update to 1.32.1
Latitude 5510 - update to 1.33.0
Latitude 7330 Rugged Laptop - update to 1.33.0
Precision 3550 - update to 1.33.0
Latitude 5430 Rugged Laptop - update to 1.33.0
Latitude 5410 - update to 1.33.0
Latitude 9510 2in1 - update to 1.33.1
XPS 15 9500 - update to 1.33.1
XPS 17 9700 - update to 1.33.1
Precision 5550 - update to 1.33.1
Precision 5750 - update to 1.33.1
Latitude 5411 - update to 1.34.0
Latitude 9410 - update to 1.34.0
Latitude 5511 - update to 1.34.0
Precision 3551 - update to 1.34.0
Precision 5560 - update to 1.35.0
Latitude 7410 - update to 1.35.0
Latitude 7310 - update to 1.35.0
XPS 15 9510 - update to 1.35.0
Latitude 7210 2-in-1 - update to 1.35.1
OptiPlex 3280 All-in-One - update to 1.35.1
Precision 7550 - update to 1.36.0
Latitude 9420 - update to 1.36.0
Precision 7750 - update to 1.36.0
OptiPlex 7490 All-in-One - update to 1.36.0
OptiPlex 5490 All-In-One - update to 1.36.0
OptiPlex 7780 All-in-One - update to 1.36.1
Latitude 5421 - update to 1.36.1
Precision 3640 - update to 1.36.1
Latitude 7320 Detachable - update to 1.37.0
Latitude 9520 - update to 1.37.0
Precision 7760 - update to 1.37.1
Precision 7560 - update to 1.37.1
Latitude 7520 - update to 1.40.0
Latitude 7420 - update to 1.40.0
Latitude 7320 - update to 1.40.0
Latitude 5420 - update to 1.43.0
XPS 9320 - update to 2.18.1
Precision 3660 - update to 2.22.0
XPS 8940 - update to 2.25.0
OptiPlex 3080 - update to 2.28.1
XPS 13 9310 2-in-1 - update to 2.30.0
Vostro 3888 - update to 2.31.1
Vostro 3881 - update to 2.31.1
Vostro 3681 - update to 2.31.1
Precision 3460 XE Small Form Factor / Precision 3460 Small Form Factor - update to 3.12.0
Precision 3260 XE Compact / Precision 3260 Compact - update to 3.12.0

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html

• Multiple vulnerabilities in Intel System Security Report and System Resources Defense
• Multiple vulnerabilities in Dell Client Platform