VULNERABILITY INTELLIGENCE

CVE-2023-34997

CVSS score6.7 MEDIUM
EPSS probability0.18%
CISA KEVNot currently listed
Published2023-11-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access.

Weakness classification

  • secure@intel.com: CWE-277
  • nvd@nist.gov: CWE-732

Primary references