CVE-2023-22355
Severity Score
7.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-01-07 CVE Reserved
- 2023-05-10 CVE Published
- 2023-05-11 EPSS Updated
- 2024-08-02 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Advisor Search vendor "Intel" for product "Advisor" | < 2023.0 Search vendor "Intel" for product "Advisor" and version " < 2023.0" | oneapi |
Affected
| ||||||
| Intel Search vendor "Intel" | Cpu Runtime Search vendor "Intel" for product "Cpu Runtime" | < 2023.0 Search vendor "Intel" for product "Cpu Runtime" and version " < 2023.0" | opencl |
Affected
| ||||||
| Intel Search vendor "Intel" | Distribution For Python Search vendor "Intel" for product "Distribution For Python" | < 2023.0 Search vendor "Intel" for product "Distribution For Python" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Dpc\+\+ Compatibility Tool Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" | < 2023.0 Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Embree Ray Tracing Kernel Library Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" | < 2023.0 Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Fortran Compiler Search vendor "Intel" for product "Fortran Compiler" | < 2023.0 Search vendor "Intel" for product "Fortran Compiler" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Implicit Spmd Program Compiler Search vendor "Intel" for product "Implicit Spmd Program Compiler" | < 1.18.1 Search vendor "Intel" for product "Implicit Spmd Program Compiler" and version " < 1.18.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Inspector Search vendor "Intel" for product "Inspector" | < 2023.0 Search vendor "Intel" for product "Inspector" and version " < 2023.0" | oneapi |
Affected
| ||||||
| Intel Search vendor "Intel" | Integrated Performance Primitives Search vendor "Intel" for product "Integrated Performance Primitives" | < 2021.7 Search vendor "Intel" for product "Integrated Performance Primitives" and version " < 2021.7" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Integrated Performance Primitives Cryptography Search vendor "Intel" for product "Integrated Performance Primitives Cryptography" | < 2021.6.3 Search vendor "Intel" for product "Integrated Performance Primitives Cryptography" and version " < 2021.6.3" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Mpi Library Search vendor "Intel" for product "Mpi Library" | < 2021.8 Search vendor "Intel" for product "Mpi Library" and version " < 2021.8" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Base Toolkit Search vendor "Intel" for product "Oneapi Base Toolkit" | < 2023.0 Search vendor "Intel" for product "Oneapi Base Toolkit" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Data Analytics Library Search vendor "Intel" for product "Oneapi Data Analytics Library" | < 2023.0 Search vendor "Intel" for product "Oneapi Data Analytics Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Deep Neural Network Library Search vendor "Intel" for product "Oneapi Deep Neural Network Library" | < 2023.0 Search vendor "Intel" for product "Oneapi Deep Neural Network Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Dpc\+\+\/c\+\+ Compiler Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" | < 2023.0 Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Dpc\+\+ Library Search vendor "Intel" for product "Oneapi Dpc\+\+ Library" | < 2022.0 Search vendor "Intel" for product "Oneapi Dpc\+\+ Library" and version " < 2022.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Hpc Toolkit Search vendor "Intel" for product "Oneapi Hpc Toolkit" | < 2023.0.0 Search vendor "Intel" for product "Oneapi Hpc Toolkit" and version " < 2023.0.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Hpc Toolkit Search vendor "Intel" for product "Oneapi Hpc Toolkit" | 2023.0.0 Search vendor "Intel" for product "Oneapi Hpc Toolkit" and version "2023.0.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Iot Toolkit Search vendor "Intel" for product "Oneapi Iot Toolkit" | < 2023.0 Search vendor "Intel" for product "Oneapi Iot Toolkit" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Math Kernel Library Search vendor "Intel" for product "Oneapi Math Kernel Library" | < 2023.0 Search vendor "Intel" for product "Oneapi Math Kernel Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Rendering Toolkit Search vendor "Intel" for product "Oneapi Rendering Toolkit" | < 2023.0 Search vendor "Intel" for product "Oneapi Rendering Toolkit" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Threading Building Blocks Search vendor "Intel" for product "Oneapi Threading Building Blocks" | < 2021.8 Search vendor "Intel" for product "Oneapi Threading Building Blocks" and version " < 2021.8" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Toolkit And Component Software Installers Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installers" | < 4.3.0.251 Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installers" and version " < 4.3.0.251" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Video Processing Library Search vendor "Intel" for product "Oneapi Video Processing Library" | < 2023.0 Search vendor "Intel" for product "Oneapi Video Processing Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Open Image Denoise Search vendor "Intel" for product "Open Image Denoise" | < 1.4.3 Search vendor "Intel" for product "Open Image Denoise" and version " < 1.4.3" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Open Volume Kernel Library Search vendor "Intel" for product "Open Volume Kernel Library" | < 2023.0 Search vendor "Intel" for product "Open Volume Kernel Library" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Ospray Search vendor "Intel" for product "Ospray" | < 2023.0 Search vendor "Intel" for product "Ospray" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Ospray Studio Search vendor "Intel" for product "Ospray Studio" | < 2023.0 Search vendor "Intel" for product "Ospray Studio" and version " < 2023.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Trace Analyzer And Collector Search vendor "Intel" for product "Trace Analyzer And Collector" | < 2021.8.0 Search vendor "Intel" for product "Trace Analyzer And Collector" and version " < 2021.8.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Vtune Profiler Search vendor "Intel" for product "Vtune Profiler" | < 2023.0 Search vendor "Intel" for product "Vtune Profiler" and version " < 2023.0" | - |
Affected
| ||||||