PT-2023-7388 · Intel · Intel Connectivity Performance Suite

Motty Alon · Publicado 2023-11-14 · Atualizado 2024-08-30 · CVE-2023-32279

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Intel Connectivity Performance Suite versions prior to 2.1123.214.2

Description The issue is related to improper access control in the user mode driver for Intel Connectivity Performance Suite, which may allow an unauthenticated user to potentially enable information disclosure via network access. This could permit a remote attacker to reveal protected information.

Recommendations For versions prior to 2.1123.214.2, update to version 2.1123.214.2 or later to resolve the issue. As a temporary workaround, consider restricting network access to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2023-08425

CVE-2023-32279

Produtos afetados

Intel Connectivity Performance Suite

Referências · 7

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00944.html · Aviso do Fabricante
• https://t.me/cvenotify/60951 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-32279 · Aviso do Fabricante
• https://vuldb.com/ru/?id.245346 · Nota
• https://t.me/cvenotify/92902 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-08425 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-32279 · Nota de Segurança