CVEvulnerability
CVE-2023-25075
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-428
Description
Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected configurations
• intel server configuration utility (< 16.0.9)
Related
Weakness · CWE (1)
- CWE-428 Unquoted Search Path or Element weakness
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00925.html Patch, Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00925.html Patch, Vendor Advisory