CVE-2023-28823

Severity Score

7.3

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.

*Credits: N/A

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Local

Attack Complexity

High

Privileges Required

Low

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2023-04-07 CVE Reserved
2023-08-11 CVE Published
2023-08-11 EPSS Updated
2024-08-02 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-427: Uncontrolled Search Path Element

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html	2023-11-07

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Intel Search vendor "Intel"		Advisor For Oneapi Search vendor "Intel" for product "Advisor For Oneapi"				< 2023.1 Search vendor "Intel" for product "Advisor For Oneapi" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Cpu Runtime For Opencl Applications Search vendor "Intel" for product "Cpu Runtime For Opencl Applications"				< 2023.1 Search vendor "Intel" for product "Cpu Runtime For Opencl Applications" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Distribution For Python Programming Language Search vendor "Intel" for product "Distribution For Python Programming Language"				< 2023.1 Search vendor "Intel" for product "Distribution For Python Programming Language" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Dpc\+\+ Compatibility Tool Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool"				< 2023.1 Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Embree Ray Tracing Kernel Library Search vendor "Intel" for product "Embree Ray Tracing Kernel Library"				< 2023.1 Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Fortran Compiler Search vendor "Intel" for product "Fortran Compiler"				< 2023.1 Search vendor "Intel" for product "Fortran Compiler" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Implicit Spmd Program Compiler Search vendor "Intel" for product "Implicit Spmd Program Compiler"				< 1.19.1 Search vendor "Intel" for product "Implicit Spmd Program Compiler" and version " < 1.19.1"		-		Affected
Intel Search vendor "Intel"		Inspector For Oneapi Search vendor "Intel" for product "Inspector For Oneapi"				< 2023.1 Search vendor "Intel" for product "Inspector For Oneapi" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Integrated Performance Primitives Search vendor "Intel" for product "Integrated Performance Primitives"				< 2021.8 Search vendor "Intel" for product "Integrated Performance Primitives" and version " < 2021.8"		-		Affected
Intel Search vendor "Intel"		Ipp Cryptography Search vendor "Intel" for product "Ipp Cryptography"				< 2021.7.0 Search vendor "Intel" for product "Ipp Cryptography" and version " < 2021.7.0"		-		Affected
Intel Search vendor "Intel"		Mpi Library Search vendor "Intel" for product "Mpi Library"				< 2021.9.0 Search vendor "Intel" for product "Mpi Library" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Oneapi Base Toolkit Search vendor "Intel" for product "Oneapi Base Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Base Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Data Analytics Library Search vendor "Intel" for product "Oneapi Data Analytics Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Data Analytics Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Deep Neural Network Library Search vendor "Intel" for product "Oneapi Deep Neural Network Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Deep Neural Network Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Dpc\+\+\/c\+\+ Compiler Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler"				< 2023.1 Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Dpc\+\+ Library \(onedpl\) Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)"				< 2022.1 Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)" and version " < 2022.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Hpc Toolkit Search vendor "Intel" for product "Oneapi Hpc Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Hpc Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Iot Toolkit Search vendor "Intel" for product "Oneapi Iot Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Iot Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Math Kernel Library Search vendor "Intel" for product "Oneapi Math Kernel Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Math Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Rendering Toolkit Search vendor "Intel" for product "Oneapi Rendering Toolkit"				< 2023.1 Search vendor "Intel" for product "Oneapi Rendering Toolkit" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Oneapi Threading Building Blocks Search vendor "Intel" for product "Oneapi Threading Building Blocks"				< 2021.9.0 Search vendor "Intel" for product "Oneapi Threading Building Blocks" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Oneapi Toolkit And Component Software Installer Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer"				< 4.3.1.493 Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer" and version " < 4.3.1.493"		-		Affected
Intel Search vendor "Intel"		Oneapi Video Processing Library Search vendor "Intel" for product "Oneapi Video Processing Library"				< 2023.1 Search vendor "Intel" for product "Oneapi Video Processing Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Open Image Denoise Search vendor "Intel" for product "Open Image Denoise"				< 1.4.3 Search vendor "Intel" for product "Open Image Denoise" and version " < 1.4.3"		-		Affected
Intel Search vendor "Intel"		Open Volume Kernel Library Search vendor "Intel" for product "Open Volume Kernel Library"				< 2023.1 Search vendor "Intel" for product "Open Volume Kernel Library" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Ospray Search vendor "Intel" for product "Ospray"				< 2023.1 Search vendor "Intel" for product "Ospray" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Ospray Studio Search vendor "Intel" for product "Ospray Studio"				< 2023.1 Search vendor "Intel" for product "Ospray Studio" and version " < 2023.1"		-		Affected
Intel Search vendor "Intel"		Trace Analyzer And Collector Search vendor "Intel" for product "Trace Analyzer And Collector"				< 2021.9.0 Search vendor "Intel" for product "Trace Analyzer And Collector" and version " < 2021.9.0"		-		Affected
Intel Search vendor "Intel"		Vtune Profiler For Oneapi Search vendor "Intel" for product "Vtune Profiler For Oneapi"				< 2023.1 Search vendor "Intel" for product "Vtune Profiler For Oneapi" and version " < 2023.1"		-		Affected