CVE-2023-32641
Assigner: intel
Published: 2023-11-14T19:04:54.038Z
State: PUBLISHED
problemTypes: descriptions: description: escalation of privilege, denial of service
description: Improper input validation
cweId: CWE-20
type: CWE
affected: vendor: n/a
product: Intel(R) QAT
versions: version: before version QAT20.L.1.0.40-00004
status: affected
defaultStatus: unaffected
descriptions: value: Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_1: version: 3.1
baseScore: 7.3
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H
attackVector: ADJACENT_NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: REQUIRED
scope: CHANGED
confidentialityImpact: NONE
integrityImpact: HIGH
availabilityImpact: HIGH