Buffer Restriction Flaw in Intel Thunderbolt DCH Drivers for Windows
CVE-2023-27308

4.6MEDIUM

Key Information:

Vendor

Intel
Status
Intel(r) Thunderbolt(tm) Dch Drivers For Windows
Vendor
CVE Published:
14 February 2024

What is CVE-2023-27308?

A vulnerability exists within certain Intel Thunderbolt DCH drivers for Windows, stemming from improper buffer restrictions. This flaw permits a privileged user, with local access, to potentially escalate their privileges. Affected systems running versions of the Thunderbolt DCH drivers prior to version 88 may be at risk, necessitating prompt updates to secure environments. For detailed technical information, refer to Intel's advisory.

Affected Version(s)

Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
4.6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.