MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-35060

CVSS 6.7v3.1pub. 2024-02-14upd. 2024-11-21

Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Intel Battery Life Diagnostic Tool
APP
Intel
< 2.3.1

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

CWE

CWE-427

References

www.intel.com/content/www/us/en/security-center/advisor…

Related vulnerabilities

CVE-2023-30763HIGH7.2ten sam produkt

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to ...

CVE-2022-34153HIGH8.2ten sam produkt

Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow a...

CVE-2022-36278HIGH8.2ten sam produkt

Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2....

CVE-2020-12346HIGH7.8ten sam produkt

Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may a...

CVE-2023-34430MEDIUM6.7ten sam produkt

Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an...