Vulnerability in Intel Thunderbolt DCH Drivers for Windows
CVE-2023-25779

6.7MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Thunderbolt(tm) Dch Drivers For Windows
Vendor
CVE Published:
14 February 2024

What is CVE-2023-25779?

An uncontrolled search path element exists in the Intel Thunderbolt DCH drivers for Windows prior to version 88. This vulnerability permits an authenticated user to manipulate local access, potentially leading to the escalation of privileges. Proper security measures should be taken to address this issue as outlined in the official advisory.

Affected Version(s)

Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.