PT-2024-12489 · Intel · Intel Vroc

Mohamed Amine Saidani · CVE-2023-35003 · Published 2024-02-14 · Updated 2024-10-28

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) VROC software versions prior to 8.0.8.1001

Description The issue allows an authenticated user to potentially enable escalation of privilege via local access due to path transversal in some Intel(R) VROC software.

Recommendations For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

CWE-249

Related Identifiers

CVE-2023-35003

Affected Products

Intel Vroc

References · 5

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35003 · Security Note
• https://osv.dev/vulnerability/CVE-2023-35003 · Vendor Advisory
• https://twitter.com/CVEnew/status/1757764812690563550 · Twitter Post
• https://t.me/cvenotify/99772 · Telegram Post