CVEvulnerability

CVE-2023-34997

7.8 HIGH Published 2023-11-14 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2023-11-14
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 ([email protected]): 6.7 MEDIUM — CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected]): 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-277, CWE-732

Description

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected configurations

• intel server configuration utility (< 16.0.9)

Weakness · CWE (2)

CWE-277 Insecure Inherited Permissions weakness
CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00925.html Vendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00925.html Vendor Advisory

CVE-2023-34997

Description

Affected configurations

Related

Weakness · CWE (2)

References