CVE-2023-27391

Severity Score

6.7

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.

*Credits: N/A

CVSS Scores

NISTv3.1 6.7

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-04-07 CVE Reserved
2023-08-11 CVE Published
2023-08-11 EPSS Updated
2024-10-15 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-284: Improper Access Control

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intel Search vendor "Intel"		Advisor For Oneapi Search vendor "Intel" for product "Advisor For Oneapi"				< 2023.1 Search vendor "Intel" for product "Advisor For Oneapi" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Cpu Runtime For Opencl Applications Search vendor "Intel" for product "Cpu Runtime For Opencl Applications"				< 2023.1 Search vendor "Intel" for product "Cpu Runtime For Opencl Applications" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Distribution For Python Programming Language Search vendor "Intel" for product "Distribution For Python Programming Language"				< 2023.1 Search vendor "Intel" for product "Distribution For Python Programming Language" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Dpc\+\+ Compatibility Tool Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool"				< 2023.1 Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Embree Ray Tracing Kernel Library Search vendor "Intel" for product "Embree Ray Tracing Kernel Library"				< 2023.1 Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Fortran Compiler Search vendor "Intel" for product "Fortran Compiler"				< 2023.1 Search vendor "Intel" for product "Fortran Compiler" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Implicit Spmd Program Compiler Search vendor "Intel" for product "Implicit Spmd Program Compiler"				< 1.19.1 Search vendor "Intel" for product "Implicit Spmd Program Compiler" and version " < 1.19.1"		-		Affected
Intel Search vendor "Intel"		Inspector For Oneapi Search vendor "Intel" for product "Inspector For Oneapi"				< 2023.1 Search vendor "Intel" for product "Inspector For Oneapi" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Integrated Performance Primitives Search vendor "Intel" for product "Integrated Performance Primitives"				< 2021.8 Search vendor "Intel" for product "Integrated Performance Primitives" and version " < 2021.8"		-		Affected
Intel Search vendor "Intel"		Ipp Cryptography Search vendor "Intel" for product "Ipp Cryptography"				< 2021.7.0 Search vendor "Intel" for product "Ipp Cryptography" and version " < 2021.7.0"		-		Affected
Intel Search vendor "Intel"		Mpi Library Search vendor "Intel" for product "Mpi Library"				< 2021.9.0 Search vendor "Intel" for product "Mpi Library" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Oneapi Base Toolkit Search vendor "Intel" for product "Oneapi Base Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Base Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Data Analytics Library Search vendor "Intel" for product "Oneapi Data Analytics Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Data Analytics Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Deep Neural Network Library Search vendor "Intel" for product "Oneapi Deep Neural Network Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Deep Neural Network Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Dpc\+\+\/c\+\+ Compiler Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler"				< 2023.1 Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Dpc\+\+ Library \(onedpl\) Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)"				< 2022.1 Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)" and version " < 2022.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Hpc Toolkit Search vendor "Intel" for product "Oneapi Hpc Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Hpc Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Iot Toolkit Search vendor "Intel" for product "Oneapi Iot Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Iot Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Math Kernel Library Search vendor "Intel" for product "Oneapi Math Kernel Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Math Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Rendering Toolkit Search vendor "Intel" for product "Oneapi Rendering Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Rendering Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Threading Building Blocks Search vendor "Intel" for product "Oneapi Threading Building Blocks"				< 2021.9.0 Search vendor "Intel" for product "Oneapi Threading Building Blocks" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Oneapi Toolkit And Component Software Installer Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer"				< 4.3.1.493 Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer" and version " < 4.3.1.493"		-		Affected
Intel Search vendor "Intel"		Oneapi Video Processing Library Search vendor "Intel" for product "Oneapi Video Processing Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Video Processing Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Open Image Denoise Search vendor "Intel" for product "Open Image Denoise"				< 1.4.3 Search vendor "Intel" for product "Open Image Denoise" and version " < 1.4.3"		-		Affected
Intel Search vendor "Intel"		Open Volume Kernel Library Search vendor "Intel" for product "Open Volume Kernel Library"				< 2023.1 Search vendor "Intel" for product "Open Volume Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Ospray Search vendor "Intel" for product "Ospray"				< 2023.1 Search vendor "Intel" for product "Ospray" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Ospray Studio Search vendor "Intel" for product "Ospray Studio"				< 2023.1 Search vendor "Intel" for product "Ospray Studio" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Trace Analyzer And Collector Search vendor "Intel" for product "Trace Analyzer And Collector"				< 2021.9.0 Search vendor "Intel" for product "Trace Analyzer And Collector" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Vtune Profiler For Oneapi Search vendor "Intel" for product "Vtune Profiler For Oneapi"				< 2023.1 Search vendor "Intel" for product "Vtune Profiler For Oneapi" and version " < 2023.1"		-		Affected