Improper Access Control in Intel Thunderbolt Drivers
CVE-2023-27301

4.2MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Thunderbolt(tm) Dch Drivers For Windows
Vendor
CVE Published:
14 February 2024

What is CVE-2023-27301?

Access control issues in certain Intel Thunderbolt DCH drivers for Windows prior to version 88 may permit an authenticated user to potentially escalate privileges through local access. This vulnerability raises significant cybersecurity concerns as it could allow unauthorized actions within the affected environment, posing risks to system integrity and confidentiality.

Affected Version(s)

Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.