deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-40964
Published: 2023-08-11
Description: Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
CVE: CVE-2022-40982
Published: 2023-08-11
Description: Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-1342, CWE-203
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00828.html; https://access.redhat.com/solutions/7027704; https://aws.amazon.com/security/security-bulletins/AWS-2023-007/
CVE: CVE-2022-41804
Published: 2023-08-11
Description: Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1334
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00837.html; https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
CVE: CVE-2022-41984
Published: 2023-08-11
Description: Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-693
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00812.html
CVE: CVE-2022-43456
Published: 2023-08-11
Description: Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-426
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00795.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00795.html
CVE: CVE-2022-43505
Published: 2023-08-11
Description: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-691
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html
CVE: CVE-2022-44611
Published: 2023-08-11
Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-20
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00813.html
CVE: CVE-2022-44612
Published: 2023-08-11
Description: Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-798, CWE-798
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00897.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00897.html
CVE: CVE-2022-45112
Published: 2023-08-11
Description: Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00846.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00846.html
CVE: CVE-2022-46329
Published: 2023-08-11
Description: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-693
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00766.html; https://lists.debian.org/debian-lts-announce/2023/09/msg00043.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HUCYUR4WBTELCRHELISJ3RMZVHKIV5TN/
CVE: CVE-2023-22276
Published: 2023-08-11
Description: Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-421, CWE-362
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00835.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00835.html
CVE: CVE-2023-22330
Published: 2023-08-11
Description: Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-908, CWE-908
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE: CVE-2023-22338
Published: 2023-08-11
Description: Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125, CWE-125
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS/
CVE: CVE-2023-22356
Published: 2023-08-11
Description: Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-665, CWE-665
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE: CVE-2023-22444
Published: 2023-08-11
Description: Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel(R) NUC 11 Performance Mini PC, Intel(R) NUC Compute Element, Intel(R) NUC Laptop Kit, Intel(R) NUC Pro Kit, Intel(R) NUC Pro Board and Intel(R) NUC Pro Mini PC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-665, CWE-665
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE: CVE-2023-22449
Published: 2023-08-11
Description: Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00917.html
CVE: CVE-2023-22840
Published: 2023-08-11
Description: Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-86
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00818.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J7RNFPWOSFII2JE2KDRHPLJANZC3YATW/; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/L27GRS7E45IOCZ44VQX2NJ33GVRBWHBS/
CVE: CVE-2023-22841
Published: 2023-08-11
Description: Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset before version 16.0.7 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-428, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00830.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00830.html
CVE: CVE-2023-23577
Published: 2023-08-11
Description: Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00829.html
CVE: CVE-2023-23908
Published: 2023-08-11
Description: Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00836.html; https://lists.debian.org/debian-lts-announce/2023/08/msg00026.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HKREYYTWUY7ZDNIB2N6H5BUJ3LE5VZPE/
CVE: CVE-2023-24016
Published: 2023-08-11
Description: Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00800.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00800.html
CVE: CVE-2023-25182
Published: 2023-08-11
Description: Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html
CVE: CVE-2023-25757
Published: 2023-08-11
Description: Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via network access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00897.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00897.html
CVE: CVE-2023-25773
Published: 2023-08-11
Description: Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00826.html
CVE: CVE-2023-25775
Published: 2023-08-11
Description: Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00794.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00004.html; https://lists.debian.org/debian-lts-announce/2024/01/msg00005.html
CVE: CVE-2023-25944
Published: 2023-08-11
Description: Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00844.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00844.html
CVE: CVE-2023-26587
Published: 2023-08-11
Description: Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00859.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00859.html
CVE: CVE-2023-27391
Published: 2023-08-11
Description: Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html
CVE: CVE-2023-27392
Published: 2023-08-11
Description: Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00862.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00862.html
CVE: CVE-2023-27505
Published: 2023-08-11
Description: Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00848.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00848.html
CVE: CVE-2023-27506
Published: 2023-08-11
Description: Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-92, CWE-119
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00840.html
CVE: CVE-2023-27509
Published: 2023-08-11
Description: Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enable escalation of privileges via local access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-284
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00849.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00849.html
CVE: CVE-2023-27515
Published: 2023-08-11
Description: Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.1 (HIGH)
CWE: CWE-79, CWE-79
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00878.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00878.html
CVE: CVE-2023-27887
Published: 2023-08-11
Description: Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-665, CWE-665
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE: CVE-2023-28380
Published: 2023-08-11
Description: Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00877.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00877.html
CVE: CVE-2023-28385
Published: 2023-08-11
Description: Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-285
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00868.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00868.html
CVE: CVE-2023-28405
Published: 2023-08-11
Description: Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00842.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00842.html
CVE: CVE-2023-28658
Published: 2023-08-11
Description: Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00873.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00873.html
CVE: CVE-2023-28711
Published: 2023-08-11
Description: Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-691, CWE-670
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00879.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00879.html
CVE: CVE-2023-28714
Published: 2023-08-11
Description: Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-284, CWE-863
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00872.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00872.html
CVE: CVE-2023-28736
Published: 2023-08-11
Description: Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-120, CWE-120
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html
CVE: CVE-2023-28823
Published: 2023-08-11
Description: Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html
CVE: CVE-2023-28938
Published: 2023-08-11
Description: Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of service via local access.
CVSS Score: 3.4 (LOW)
CWE: CWE-400, CWE-400
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00690.html
CVE: CVE-2023-29151
Published: 2023-08-11
Description: Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00907.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00907.html
CVE: CVE-2023-29243
Published: 2023-08-11
Description: Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-252, CWE-252
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html
CVE: CVE-2023-29494
Published: 2023-08-11
Description: Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE: CVE-2023-29500
Published: 2023-08-11
Description: Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information disclosure via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00892.html
CVE: CVE-2023-30760
Published: 2023-08-11
Description: Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00912.html
CVE: CVE-2023-31246
Published: 2023-08-11
Description: Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html; http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00905.html