ByteOS Network

NVD Vulnerability Details :

CVE-2023-27383

Analyzed

Source-secure@intel.com

Published At-14 Nov, 2023 | 19:15

Updated At-30 Nov, 2023 | 16:39

Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.8	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.8	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CPE Matches

Intel Corporation

>>advisor>>Versions before 2023.1(exclusive)

cpe:2.3:a:intel:advisor:*:*:*:*:*:*:*:*

Intel Corporation

>>inspector>>Versions before 2023.1(exclusive)

cpe:2.3:a:intel:inspector:*:*:*:*:*:*:*:*

Intel Corporation

>>mpi_library>>Versions before 2021.9(exclusive)

cpe:2.3:a:intel:mpi_library:*:*:*:*:*:*:*:*

Intel Corporation

>>oneapi_base_toolkit>>Versions before 2023.1(exclusive)

cpe:2.3:a:intel:oneapi_base_toolkit:*:*:*:*:*:*:*:*

Intel Corporation

>>oneapi_hpc_toolkit>>Versions before 2023.1(exclusive)

cpe:2.3:a:intel:oneapi_hpc_toolkit:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-693	Secondary	secure@intel.com

References

Hyperlink	Source	Resource
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00841.html	secure@intel.com	Patch Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History