PT-2024-7302 · Intel · Intel Sgx

Ilya Alexandrovich · Published 2024-09-10 · Updated 2024-09-16 · CVE-2023-43753

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Intel(R) Processors with Intel(R) SGX (affected versions not specified)

Description: The issue is related to an improper conditions check in the implementation of Intel's Software Guard eXtensions (SGX) technology. This could allow a privileged user to potentially enable information disclosure via local access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Neutralization

Special Elements Injection

Weakness Enumeration

CWE-707

CWE-74

CWE-92

Related Identifiers

BDU:2024-08656

CVE-2023-43753

Affected Products

Intel Sgx

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-43753 · Security Note
• https://bdu.fstec.ru/vul/2024-08656 · Security Note
• https://t.me/cvedetector/5748 · Telegram Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html · Note
• https://twitter.com/VulmonFeeds/status/1835753052978000335 · Twitter Post
• https://security.netapp.com/advisory/ntap-20241011-0009 · Note
• https://vuldb.com/?id.277563 · Note
• https://twitter.com/CVEnew/status/1835724270070325291 · Twitter Post