CVE-2023-27305

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 14, 2023
Updated: May 16, 2024
CWE ID 276

Summary

CVE-2023-27305 is a vulnerability affecting Intel(R) Arc(TM) Control software before version 1.73.5335.2. This issue stems from incorrect default permissions, granting authenticated users potential escalation of privilege through local access. By exploiting this flaw, an attacker could gain elevated privileges, which could lead to significant system compromises. Users are strongly urged to update to the latest version of the software to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share