PT-2024-2699 · Intel+1 · Intel Optane Pmem+1

Marius Gabriel Mihai · Published 2024-02-13 · Updated 2024-02-14 · CVE-2023-27517

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel(R) Optane(TM) PMem software versions prior to 01.00.00.3547 Intel(R) Optane(TM) PMem software versions prior to 02.00.00.3915 Intel(R) Optane(TM) PMem software versions prior to 03.00.00.0483

Description The issue is related to improper access control in some Intel(R) Optane(TM) PMem software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This vulnerability affects Intel Optane PMem 100 Series, Intel Optane PMem 200 Series, and Intel Optane PMem 300 Series.

Recommendations For versions prior to 01.00.00.3547, update to version 01.00.00.3547 or later. For versions prior to 02.00.00.3915, update to version 02.00.00.3915 or later. For versions prior to 03.00.00.0483, update to version 03.00.00.0483 or later.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2024-02810

CVE-2023-27517

Affected Products

Debian

Intel Optane Pmem

References · 10

• https://cve.org/CVERecord?id=CVE-2023-27517 · Security Note
• https://bdu.fstec.ru/vul/2024-02810 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-27517 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-27517 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-27517 · Security Note
• https://osv.dev/vulnerability/CVE-2023-27517 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-27517 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-27517 · Vendor Advisory
• https://twitter.com/CVEnew/status/1757764816792678854 · Twitter Post