#VU86896 Improper access control in Intel products - CVE-2023-27517
Published: February 28, 2024
Vulnerability identifier: #VU86896
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2023-27517
CWE-ID: CWE-284
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Intel Optane Persistent Memory 100 Series
Intel Optane Persistent Memory 200 Series
Intel Optane Persistent Memory 300 Series
Intel Optane Persistent Memory 100 Series
Intel Optane Persistent Memory 200 Series
Intel Optane Persistent Memory 300 Series
Software vendor:
Intel
Intel
Description
The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.
The vulnerability exists due to improper access restrictions. A local user can bypass implemented security restrictions and gain elevated privileges.
Remediation
Install updates from vendor's website.