Incorrect default permissions in Intel products - CVE-2023-43747

Vulnerability identifier: #VU96031

CSH Severity: Low

CVSS v4: 5.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2023-43747

CWE-ID: CWE-276

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to incorrect default permissions. A local user with access to the system can gain elevated privileges on the target system.

Intel NUC M15 Laptop Kit - LAPRC710
Intel NUC M15 Laptop Kit - LAPRC510
ThinkPad T16 Gen 2 21HJ
ThinkPad T14s Gen 5 21LT
ThinkPad T14s Gen 6 21QX
ThinkPad T14s Gen 6 21QY
ThinkPad T15p Gen 3 21DA
ThinkPad T15p Gen 3 21DB
ThinkPad T16 Gen 1 21BV
ThinkPad T16 Gen 1 21BW
ThinkPad T16 Gen 2 21HH
ThinkPad T14s Gen 5 21LS
ThinkPad T16 Gen 3 21MN
ThinkPad T16 Gen 3 21MQ
ThinkPad S2 Gen 8 Types 21FL China Only
Type 21LQ ThinkPad S2 Gen 9 China Only
ThinkPad X1 2-in-1 Gen 10 21NU
ThinkPad X1 2-in-1 Gen 10 21NV
ThinkPad X1 2-in-1 Gen 9 21KE
ThinkPad X1 2-in-1 Gen 9 21KF
ThinkPad T14 Gen 4 21HE
ThinkPad P16v Gen 1 21FD
ThinkPad P16v Gen 2 21KX
ThinkPad P16v Gen 2 21KY
ThinkPad R14 Gen 6 21M9
ThinkPad S2 Yoga Gen 8 21FM
ThinkPad T14 Gen 3 21AH
ThinkPad T14 Gen 3 21AJ
ThinkPad T14 Gen 4 21HD
ThinkPad X1 Carbon 10th Gen 21CB
ThinkPad T14 Gen 5 21ML
ThinkPad T14 Gen 5 21MM
ThinkPad T14p Gen 1 (Type 21J7) PRC
ThinkPad T14p Gen 1 (Type 21J7) Only
ThinkPad T14s Gen 3 21BR
ThinkPad T14s Gen 3 21BS
ThinkPad T14s Gen 4 21F6
ThinkPad T14s Gen 4 21F7
ThinkPad X13 Gen 4 21EY
ThinkPad X1 Yoga 8th Gen 21HR
ThinkPad X12 Detachable Gen 2 21LK
ThinkPad X12 Detachable Gen 2 21LL
ThinkPad X13 2-in-1 Gen 5 21LW
ThinkPad X13 2-in-1 Gen 5 21LX
ThinkPad X13 Gen 3 21BN
ThinkPad X13 Gen 3 21BQ
ThinkPad X13 Gen 4 21EX
ThinkPad X1 Yoga 8th Gen 21HQ
ThinkPad X13 Gen 5 21LU
ThinkPad X13 Gen 5 21LV
ThinkPad X13 Yoga Gen 3 21AW
ThinkPad X13 Yoga Gen 3 21AX
ThinkPad X13 Yoga Gen 4 21F2
ThinkPad X13 Yoga Gen 4 21F3
ThinkPad X9-14 Gen 1 21QA
ThinkPad X9-14 Gen 1 21QB
ThinkPad X1 Extreme Gen 5 21DF
ThinkPad X1 Carbon 10th Gen 21CC
ThinkPad X1 Carbon 11th Gen 21HM
ThinkPad X1 Carbon 11th Gen 21HN
ThinkPad X1 Carbon 12th Gen 21KC
ThinkPad X1 Carbon 12th Gen 21KD
ThinkPad X1 Carbon 13th Gen 21NS
ThinkPad X1 Carbon 13th Gen 21NT
ThinkPad X1 Extreme Gen 5 21DE
ThinkPad P16v Gen 1 21FC
ThinkPad X1 Fold 16 Gen 1 21ES
ThinkPad X1 Fold 16 Gen 1 21ET
ThinkPad X1 Nano Gen 2 21E8
ThinkPad X1 Nano Gen 2 21E9
ThinkPad X1 Nano Gen 3 21K1
ThinkPad X1 Nano Gen 3 21K2
ThinkPad X1 Yoga 7th Gen 21CD
ThinkPad X1 Yoga 7th Gen 21CE
ThinkPad L13 Gen 4 21FH
ThinkPad E16 Gen 2 21MB
ThinkPad E16 Gen 3 21SR
ThinkPad E16 Gen 3 21SS
ThinkPad L13 2-in-1 Gen 5 21LM
ThinkPad L13 2-in-1 Gen 5 21LN
ThinkPad L13 Gen 3 21B3
ThinkPad L13 Gen 3 21B4
ThinkPad L13 Gen 4 21FG
ThinkPad E16 Gen 2 21MA
ThinkPad L13 Gen 5 21LB
ThinkPad L13 Gen 5 21LC
ThinkPad L13 Yoga Gen 3 21B5
ThinkPad L13 Yoga Gen 3 21B6
ThinkPad L13 Yoga Gen 4 21FJ
ThinkPad L13 Yoga Gen 4 21FK
ThinkPad L14 Gen 3 21C1
ThinkPad L14 Gen 3 21C2
Yoga 7 16IRL8
IdeaPad Flex 5 16IRU8
IdeaPad Pro 5 14IMH9
IdeaPad Pro 5 14IRH8
Lenovo Flex 7 14IRU8
Lenovo Slim 7 14IRP8
ThinkBook 14 G5 IRL
ThinkBook 15 G5 IRL
Yoga 7 14IRL8
ThinkPad L14 Gen 4 21H1
Yoga Pro 7 14IMH9
Yoga Pro 7 14IRH8
Yoga Slim 6 14IRH8
Yoga Slim 6 14IRP8
ThinkPad E14 Gen 6 21M7
ThinkPad E14 Gen 6 21M8
ThinkPad E14 Gen 7 21SX
ThinkPad E14 Gen 7 21SY
ThinkPad P16 Gen 1 21D7
ThinkPad P14s Gen 3 21AL
ThinkPad P14s Gen 4 21HF
ThinkPad P14s Gen 4 21HG
ThinkPad P14s Gen 5 21G2
ThinkPad P14s Gen 5 21G3
ThinkPad P15v Gen 3 21D8
ThinkPad P15v Gen 3 21D9
ThinkPad P16 Gen 1 21D6
ThinkPad P14s Gen 3 21AK
ThinkPad P16 Gen 2 21FA
ThinkPad P16 Gen 2 21FB
ThinkPad P16s Gen 1 21BT
ThinkPad P16s Gen 1 21BU
ThinkPad P16s Gen 2 21HK
ThinkPad P16s Gen 2 21HL
ThinkPad P16s Gen 3 21KS
ThinkPad P16s Gen 3 21KT
ThinkPad L16 Gen 1 21L3
ThinkPad L14 Gen 4 21H2
ThinkPad L14 Gen 5 21L1
ThinkPad L14 Gen 5 21L2
ThinkPad L14p Gen 6 21UA
ThinkPad L15 Gen 3 21C3
ThinkPad L15 Gen 3 21C4
ThinkPad L15 Gen 4 21H3
ThinkPad L15 Gen 4 21H4
IdeaPad Flex 5 14IRU8
ThinkPad L16 Gen 1 21L4
ThinkPad Neo 14 21DN
ThinkPad P1 Gen 5 21DC
ThinkPad P1 Gen 5 21DD
ThinkPad P1 Gen 6 21FV
ThinkPad P1 Gen 6 21FW
ThinkPad P1 Gen 7 21KV
ThinkPad P1 Gen 7 21KW
Intel Connectivity Performance Suite
Intel Connectivity Performance Suite for Windows 11 (64-bit) - ThinkBook 14 G5 IRL, ThinkBook 15 G5 IRL
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Pro 7 14IRH8
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Flex 5 16IRU8, IdeaPad Flex 5 14IRU8, Lenovo Flex 7 14IRU8
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga 7 14IRL8, Yoga 7 16IRL8
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Pro 7 14IMH9
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Slim 6 14IRH8
Intel Connectivity Performance Suite Driver for Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad
Intel Connectivity Performance Suite Driver for Windows 11 (Version 22H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad

Install updates from vendor's website.

Intel Connectivity Performance Suite - update to 2.0
Intel Connectivity Performance Suite for Windows 11 (64-bit) - ThinkBook 14 G5 IRL, ThinkBook 15 G5 IRL - update to 3.1024.210.1
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Pro 7 14IRH8 - update to 3.1024.210.1
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Flex 5 16IRU8, IdeaPad Flex 5 14IRU8, Lenovo Flex 7 14IRU8 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Pro 5 14IRH8 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - IdeaPad Pro 5 14IMH9 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Slim 6 14IRP8, Lenovo Slim 7 14IRP8 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga 7 14IRL8, Yoga 7 16IRL8 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Pro 7 14IMH9 - update to 3.1024.606.10
Intel Connectivity Performance Suite for Windows 11 (64-bit) - Yoga Slim 6 14IRH8 - update to 3.1024.606.10
Intel Connectivity Performance Suite Driver for Windows 11 (Version 21H2 or later), 10 64-bit (Version 20H2 or later) - ThinkPad - update to 3.1024.606.10
Intel Connectivity Performance Suite Driver for Windows 11 (Version 22H2 or later), 10 64-bit (Version 21H2 or later) - ThinkPad - update to 4.1024.1009.5

• https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01102.html

• Privilege escalation in Intel Connectivity Performance Suite Software
• Lenovo update for Intel Connectivity Performance Suite Software Installer