CVE-2023-27305
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Nov 14, 2023
Updated: May 16, 2024
CWE ID 276
Summary
CVE-2023-27305 is a vulnerability affecting Intel(R) Arc(TM) Control software before version 1.73.5335.2. This issue stems from incorrect default permissions, granting authenticated users potential escalation of privilege through local access. By exploiting this flaw, an attacker could gain elevated privileges, which could lead to significant system compromises. Users are strongly urged to update to the latest version of the software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share