CVE-2023-34350

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Nov 14, 2023
Updated: Nov 21, 2023
CWE ID 427

Summary

CVE-2023-34350 is a vulnerability affecting some versions of Intel(R) XTU software before 7.12.0.15. This issue involves an uncontrolled search path element, which can potentially be exploited by authenticated users to escalate their privileges through local access. By manipulating the search path, an attacker may be able to execute commands with elevated permissions, posing a significant risk to system security. Intel strongly recommends users upgrade to the latest version of the software to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share