Improper access control in Intel Connectivity Performance Suite - CVE-2023-32279
Published: November 20, 2023
Vulnerability identifier: #VU83301
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-32279
CWE-ID: CWE-284
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions in the Intel Connectivity Performance Suite software for some Intel Wireless Products. A remote attacker can send specially crafted input to the system and obtain potentially sensitive information.
Affected software
Intel Connectivity Performance Suite
Dell Precision Optimizer
Dell Precision Optimizer
How to mitigate CVE-2023-32279
Install updates from vendor's website.
Intel Connectivity Performance Suite - update to 2.1123.214.2
Dell Precision Optimizer - update to 4.1.3
Dell Precision Optimizer - update to 4.1.3