PT-2024-2223 · Intel · Intel Thunderbolt Controllers

Published 2024-02-13 · Updated 2024-02-14 · CVE-2023-28396

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Thunderbolt(TM) Controllers versions prior to 41

Description The issue is related to improper access control in the firmware of some Intel(R) Thunderbolt(TM) Controllers, which may allow a privileged user to enable denial of service via local access. This can be exploited by an attacker to cause a disruption in service.

Recommendations For Intel(R) Thunderbolt(TM) Controllers versions prior to 41, update the firmware to version 41 or later to resolve the issue. As a temporary workaround, consider restricting local access to the Thunderbolt controllers to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-02152

CVE-2023-28396

Affected Products

Intel Thunderbolt Controllers

References · 7

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00895.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-28396 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28396 · Security Note
• https://bdu.fstec.ru/vul/2024-02152 · Security Note
• https://twitter.com/CVEnew/status/1757764835943862658 · Twitter Post
• https://support.lenovo.com/ru/ru/product_security/ps500001-lenovo-product-security-advisories · Note
• https://support.hp.com/us-en/security-bulletins?jumpid=va_r602_us · Note