CVE-2023-47855CWE-20

CVE-2023-47855

Medium · published May 17, 2024

CVSS v3.1

6.0

EPSS

Percentile

29.5

In the wild

Unconfirmed

What it is

Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.

The record

Technical detail

CVSS v3.1: 6.0 · MEDIUM
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0: Not supplied
EPSS: 0.00368 · 29.5th percentile
Weakness: CWE-20 · Improper Input Validation
Published: 2024-05-17T01:16Z

Affected products (2)

Product	Versions	Fixed in
intel/tdx_module	< 1.5.05.46.698	1.5.05.46.698
netapp/hci_compute_node_bios	all versions	—

References (4)

https://security.netapp.com/advisory/ntap-20240621-0003/ · [email protected]https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html · [email protected]https://security.netapp.com/advisory/ntap-20240621-0003/ · af854a3a-2127-422b-91ae-364da2661108 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html · af854a3a-2127-422b-91ae-364da2661108

EPSS history

Timeline

16 MAY 20:47Z
Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of…
cvelistv5