Potential Escalation of Privilege via Local Access in Intel XTU Software
CVE-2023-28407

7.8HIGH

Key Information:

Vendor

Intel
Status
Intel(r) Xtu Software
Vendor
CVE Published:
14 February 2024

What is CVE-2023-28407?

An issue exists in the Intel Extreme Tuning Utility (XTU) software that allows an authenticated user to exploit an uncontrolled search path vulnerability. This can lead to privilege escalation with local access, potentially enabling unauthorized access to system resources, configurations, or sensitive data. Users of affected versions should take note of the risk and consider applying available patches or mitigations to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Intel(R) XTU software before version 7.12.0.29

References

https://www.intel.com/content/www/us/en/security-center/a...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.