PT-2024-1872 · Intel · Intel Driver & Support Assistant

Sim0Nsecurity · Published 2024-02-13 · Updated 2024-10-24 · CVE-2023-39425

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel Driver & Support Assistant versions prior to 23.4.33

Description The issue is related to improper access control in Intel Driver & Support Assistant software, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For versions prior to 23.4.33, update to version 23.4.33 or later to resolve the issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-01636

CVE-2023-39425

Affected Products

Intel Driver & Support Assistant

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2023-39425 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-39425 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-01636 · Security Note
• https://twitter.com/cracbot/status/1758008293908475918 · Twitter Post
• https://twitter.com/CVEnew/status/1757764800413831483 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1757795101605068938 · Twitter Post
• https://t.me/cvenotify/99346 · Telegram Post
• https://vuldb.com/ru/?id.253811 · Note