PT-2024-13054 · Intel · Intel Server Boards

Falcon Corruption · Published 2024-05-16 · Updated 2024-07-09 · CVE-2023-42668

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Server Boards based on Intel(R) 62X Chipset versions prior to 1.14

Description The issue is related to incorrect default permissions in some onboard video driver software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 1.14, upgrade the affected component to version 1.14 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2023-42668

Affected Products

Intel Server Boards

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2023-42668 · Security Note
• https://twitter.com/oktsec/status/1810813586781913565 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00962.html · Note
• https://twitter.com/CVEnew/status/1791215539097886921 · Twitter Post