PT-2023-9022 · Intel · Intel Wake Up Latency Tracer

Sanidhya Ved · Published 2023-05-10 · Updated 2023-05-19 · CVE-2023-27298

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Intel Wake Up Latency Tracer versions prior to 1.0.0

Description The issue is related to an uncontrolled search path in the software. This could potentially allow a remote attacker to execute arbitrary code or escalate their privileges.

Recommendations For versions prior to 1.0.0, update to version 1.0.0 or later to resolve the issue. As a temporary workaround, consider restricting network access to the affected system until the update can be applied.

Fix

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-428

CWE-426

CWE-427

Related Identifiers

BDU:2024-03034

CVE-2023-27298

Affected Products

Intel Wake Up Latency Tracer

References · 5

• https://bdu.fstec.ru/vul/2024-03034 · Security Note
• https://safe-surf.ru/specialists/bulletins-nkcki/692531 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-27298 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00853.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-27298 · Vendor Advisory