CVE-2023-28823
Severity Score
7.3
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Track*
*SSVC
Descriptions
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Track*
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2023-04-07 CVE Reserved
- 2023-08-11 CVE Published
- 2023-08-11 EPSS Updated
- 2024-10-15 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-427: Uncontrolled Search Path Element
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00890.html | 2023-11-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intel Search vendor "Intel" | Advisor For Oneapi Search vendor "Intel" for product "Advisor For Oneapi" | < 2023.1 Search vendor "Intel" for product "Advisor For Oneapi" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Cpu Runtime For Opencl Applications Search vendor "Intel" for product "Cpu Runtime For Opencl Applications" | < 2023.1 Search vendor "Intel" for product "Cpu Runtime For Opencl Applications" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Distribution For Python Programming Language Search vendor "Intel" for product "Distribution For Python Programming Language" | < 2023.1 Search vendor "Intel" for product "Distribution For Python Programming Language" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Dpc\+\+ Compatibility Tool Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" | < 2023.1 Search vendor "Intel" for product "Dpc\+\+ Compatibility Tool" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Embree Ray Tracing Kernel Library Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" | < 2023.1 Search vendor "Intel" for product "Embree Ray Tracing Kernel Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Fortran Compiler Search vendor "Intel" for product "Fortran Compiler" | < 2023.1 Search vendor "Intel" for product "Fortran Compiler" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Implicit Spmd Program Compiler Search vendor "Intel" for product "Implicit Spmd Program Compiler" | < 1.19.1 Search vendor "Intel" for product "Implicit Spmd Program Compiler" and version " < 1.19.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Inspector For Oneapi Search vendor "Intel" for product "Inspector For Oneapi" | < 2023.1 Search vendor "Intel" for product "Inspector For Oneapi" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Integrated Performance Primitives Search vendor "Intel" for product "Integrated Performance Primitives" | < 2021.8 Search vendor "Intel" for product "Integrated Performance Primitives" and version " < 2021.8" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Ipp Cryptography Search vendor "Intel" for product "Ipp Cryptography" | < 2021.7.0 Search vendor "Intel" for product "Ipp Cryptography" and version " < 2021.7.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Mpi Library Search vendor "Intel" for product "Mpi Library" | < 2021.9.0 Search vendor "Intel" for product "Mpi Library" and version " < 2021.9.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Base Toolkit Search vendor "Intel" for product "Oneapi Base Toolkit" | < 2023.1 Search vendor "Intel" for product "Oneapi Base Toolkit" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Data Analytics Library Search vendor "Intel" for product "Oneapi Data Analytics Library" | < 2023.1 Search vendor "Intel" for product "Oneapi Data Analytics Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Deep Neural Network Library Search vendor "Intel" for product "Oneapi Deep Neural Network Library" | < 2023.1 Search vendor "Intel" for product "Oneapi Deep Neural Network Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Dpc\+\+\/c\+\+ Compiler Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" | < 2023.1 Search vendor "Intel" for product "Oneapi Dpc\+\+\/c\+\+ Compiler" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Dpc\+\+ Library \(onedpl\) Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)" | < 2022.1 Search vendor "Intel" for product "Oneapi Dpc\+\+ Library \(onedpl\)" and version " < 2022.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Hpc Toolkit Search vendor "Intel" for product "Oneapi Hpc Toolkit" | < 2023.1 Search vendor "Intel" for product "Oneapi Hpc Toolkit" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Iot Toolkit Search vendor "Intel" for product "Oneapi Iot Toolkit" | < 2023.1 Search vendor "Intel" for product "Oneapi Iot Toolkit" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Math Kernel Library Search vendor "Intel" for product "Oneapi Math Kernel Library" | < 2023.1 Search vendor "Intel" for product "Oneapi Math Kernel Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Rendering Toolkit Search vendor "Intel" for product "Oneapi Rendering Toolkit" | < 2023.1 Search vendor "Intel" for product "Oneapi Rendering Toolkit" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Threading Building Blocks Search vendor "Intel" for product "Oneapi Threading Building Blocks" | < 2021.9.0 Search vendor "Intel" for product "Oneapi Threading Building Blocks" and version " < 2021.9.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Toolkit And Component Software Installer Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer" | < 4.3.1.493 Search vendor "Intel" for product "Oneapi Toolkit And Component Software Installer" and version " < 4.3.1.493" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Oneapi Video Processing Library Search vendor "Intel" for product "Oneapi Video Processing Library" | < 2023.1 Search vendor "Intel" for product "Oneapi Video Processing Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Open Image Denoise Search vendor "Intel" for product "Open Image Denoise" | < 1.4.3 Search vendor "Intel" for product "Open Image Denoise" and version " < 1.4.3" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Open Volume Kernel Library Search vendor "Intel" for product "Open Volume Kernel Library" | < 2023.1 Search vendor "Intel" for product "Open Volume Kernel Library" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Ospray Search vendor "Intel" for product "Ospray" | < 2023.1 Search vendor "Intel" for product "Ospray" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Ospray Studio Search vendor "Intel" for product "Ospray Studio" | < 2023.1 Search vendor "Intel" for product "Ospray Studio" and version " < 2023.1" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Trace Analyzer And Collector Search vendor "Intel" for product "Trace Analyzer And Collector" | < 2021.9.0 Search vendor "Intel" for product "Trace Analyzer And Collector" and version " < 2021.9.0" | - |
Affected
| ||||||
| Intel Search vendor "Intel" | Vtune Profiler For Oneapi Search vendor "Intel" for product "Vtune Profiler For Oneapi" | < 2023.1 Search vendor "Intel" for product "Vtune Profiler For Oneapi" and version " < 2023.1" | - |
Affected
| ||||||