MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-23908

CVSS 6.0v3.1pub. 2023-08-11upd. 2024-11-21

Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

  • Intel Microcode

    OS
    Intel
    < 20230808

  • Intel Xeon D 1513n

    HW
    Intel
    all versions

  • Intel Xeon D 1518

    HW
    Intel
    all versions

  • Intel Xeon D 1520

    HW
    Intel
    all versions

  • Intel Xeon D 1521

    HW
    Intel
    all versions

  • Intel Xeon D 1523n

    HW
    Intel
    all versions

  • Intel Xeon D 1527

    HW
    Intel
    all versions

  • Intel Xeon D 1528

    HW
    Intel
    all versions

  • Intel Xeon D 1529

    HW
    Intel
    all versions

  • Intel Xeon D 1531

    HW
    Intel
    all versions

  • Intel Xeon D 1533n

    HW
    Intel
    all versions

  • Intel Xeon D 1537

    HW
    Intel
    all versions

  • Intel Xeon D 1539

    HW
    Intel
    all versions

  • Intel Xeon D 1540

    HW
    Intel
    all versions

  • Intel Xeon D 1541

    HW
    Intel
    all versions

  • Intel Xeon D 1543n

    HW
    Intel
    all versions

  • Intel Xeon D 1548

    HW
    Intel
    all versions

  • Intel Xeon D 1553n

    HW
    Intel
    all versions

  • Intel Xeon D 1557

    HW
    Intel
    all versions

  • Intel Xeon D 1559

    HW
    Intel
    all versions

  • Intel Xeon D 1567

    HW
    Intel
    all versions

  • Intel Xeon D 1571

    HW
    Intel
    all versions

  • Intel Xeon D 1577

    HW
    Intel
    all versions

  • Intel Xeon D 1602

    HW
    Intel
    all versions

  • Intel Xeon D 1622

    HW
    Intel
    all versions

  • Intel Xeon D 1623n

    HW
    Intel
    all versions

  • Intel Xeon D 1627

    HW
    Intel
    all versions

  • Intel Xeon D 1633n

    HW
    Intel
    all versions

  • Intel Xeon D 1637

    HW
    Intel
    all versions

  • Intel Xeon D 1649n

    HW
    Intel
    all versions
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2022-41804HIGH7.2same product

Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a ...

CVE-2022-37343HIGH7.2same product

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to poten...

CVE-2022-26343HIGH8.2same product

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to poten...

CVE-2022-26837HIGH7.5same product

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot...

CVE-2022-21216HIGH7.5same product

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scal...