PT-2023-20293 · Intel · Intel Unite Hub

Marius Gabriel Mihai · CVE-2023-25773 · Publicado 2023-08-11 · Atualizado 2024-10-10

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Unite(R) Hub software installer for Windows versions prior to 4.2.34962

Description The issue is related to improper access control in the Intel(R) Unite(R) Hub software installer for Windows, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 4.2.34962, update to version 4.2.34962 or later to resolve the issue. As a temporary workaround, consider restricting local access to the installer until a patch is applied.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2023-25773

Produtos afetados

Intel Unite Hub

Referências · 7

• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html · Aviso do Fabricante
• https://t.me/cvenotify/97781 · Publicação no Telegram
• https://t.me/cvenotify/56674 · Publicação no Telegram
• https://twitter.com/cracbot/status/1690241793881960448 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1690556349099216896 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2023-25773 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-25773 · Nota de Segurança