PT-2024-2740 · Intel · Intel Vroc

J00Sean · Published 2024-02-13 · Updated 2024-10-28 · CVE-2023-34315

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel VROC software versions prior to 8.0.8.1001

Description The issue is related to incorrect default permissions in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is a problem with the implementation of the RAID array creation technology based on Intel VROC chipsets, where standard permissions are used incorrectly.

Recommendations For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

BDU:2024-02861

CVE-2023-34315

Affected Products

Intel Vroc

References · 9

• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-02861 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-34315 · Security Note
• https://osv.dev/vulnerability/CVE-2023-34315 · Vendor Advisory
• https://dell.com/support/kbdoc/en-id/000217982/dsa-2023-363-security-update-for-dell-precision-rack-and-precision-tower-for-multiple-vulnerabilities-in-intel-vroc-software · Note
• https://support.hp.com/us-en/document/ish_10145124-10145158-16/hpsbhf03912 · Note
• https://dell.com/support/kbdoc/en-id/000217985/dsa-2023-365 · Note
• https://twitter.com/CVEnew/status/1757764813688881368 · Twitter Post
• https://t.me/cvenotify/99771 · Telegram Post