CVE-2023-34997

High

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an…

intel·CWE-277·Published 2023-11-14

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

218 chars

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

NVDen

218 chars

NVDes

259 chars

Los permisos heredados inseguros en el instalador de algunos software de Intel Server Configuration Utility anteriores a la versión 16.0.9 pueden permitir que un usuario autenticado habilite potencialmente la escalada de privilegios a través del acceso local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	6.7	—	—	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.7	0.8	5.9	CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H