CVE-2023-25075
Assigner: intel
Published: 2023-11-14T19:04:39.620Z
State: PUBLISHED
problemTypes: descriptions: description: escalation of privilege
description: Unquoted search path
cweId: CWE-428
type: CWE
affected: vendor: n/a
product: Intel Server Configuration Utility software
versions: version: before version 16.0.9
status: affected
defaultStatus: unaffected
descriptions: value: Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 6.7
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH