CVE-2023-43489

MEDIUM EPSS 4.1%
Published Aug 14, 20241y ago · Modified Jun 17, 20261w ago
6.8 CVSS 4.0
Medium
Find Similar
Published Aug 14, 2024 1y ago
Last Modified Jun 17, 2026 1w ago

Description

Improper access control for some Intel(R) CIP software before version 2.4.10717 may allow an authenticated user to potentially enable denial of service via local access.

CVSS Details

Base Score
6.8
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
4.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-284

Affected Products 1

VendorProductVersionRange
intelcomputing_improvement_program* <2.4.10717

References 1

  • intel.com https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01112.html
    PatchVendor Advisory

Remediation

  • intel.com https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01112.html
    PatchVendor Advisory