High WID-SEC-2024-0378 3 CVEs

Intel Driver and Support Assistant: Mehrere Schwachstellen

Published Feb 13, 2024 · Updated Feb 13, 2024 · de-DE

Vendor: Intel Product: Driver and Support Assistant Platform: Linux Platform: macOS Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Intel Driver and Support Assistant ausnutzen, um seine Privilegien zu erhöhen oder einen Denial of Service Zustand herbeizuführen.

Product

Intel Treiber- und Support-Assistent sucht nach Intel-Produkten und -Treibern am eigenen System und meldet, wenn Updates für das System verfügbar sind.

Vulnerabilities 3

High 8.8

CVE-2023-39425

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…

Feb 14, 2024
Medium 6.3

CVE-2023-35062

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially…

Feb 14, 2024
Medium 5.5

CVE-2023-25073

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…

Feb 14, 2024

Revision history

2024-02-13 #1
Initiale Fassung

References

Intel Security Advisory INTEL-SA-00969 vom 2024-02-13
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00969.html