CVE-2023-39432CWE-284
Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to…
Medium · published February 14, 2024
What it is
Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potentially enable escalation of privilege via local access.
The record
Technical detail
- CVSS v3.1
- 6.7 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00167 · 5.6th percentile
- Weakness
- CWE-284 · Improper Access Control
- Published
- 2024-02-14T13:38Z
EPSS history
Timeline