PT-2023-20376 · Intel · Intel(R) Vcust Tool

Mohammed · Published 2023-08-11 · Updated 2023-08-17 · CVE-2023-25944

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) VCUST Tool versions prior to those downloaded on February 3rd, 2023

Description The issue is related to an uncontrolled search path element in the Intel(R) VCUST Tool software. This may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For Intel(R) VCUST Tool versions prior to those downloaded on February 3rd, 2023, update to a version downloaded on or after February 3rd, 2023, to resolve the issue.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-25944

Affected Products

Intel(R) Vcust Tool

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-25944 · Security Note
• http://intel.com/content/www/us/en/security-center/advisory/intel-sa-00844.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-25944 · Vendor Advisory
• https://twitter.com/CVEnew/status/1690556349090787328 · Twitter Post