Potential Escalation of Privilege via Local Access in Intel XTU Software

CVE-2023-28407

What is CVE-2023-28407?

An issue exists in the Intel Extreme Tuning Utility (XTU) software that allows an authenticated user to exploit an uncontrolled search path vulnerability. This can lead to privilege escalation with local access, potentially enabling unauthorized access to system resources, configurations, or sensitive data. Users of affected versions should take note of the risk and consider applying available patches or mitigations to safeguard their systems.

References