Intel · Intel Csme Installer · CVE-2023-28389
**Name of the Vulnerable Software and Affected Versions**
Intel(R) CSME installer software versions prior to 2328.5.5.0
**Description**
The issue is related to incorrect default permissions in some Intel(R) CSME installer software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges.
**Recommendations**
For versions prior to 2328.5.5.0, update to version 2328.5.5.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.