PT-2024-2524
CVE-2023-32633
·
تاريخ النشر
2024-03-12
·
تاريخ التحديث
2024-03-14
الوصف من
CVSS 3.1
6.7
متوسطةالمقاييسAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel CSME versions prior to 2328.5.5.0
Description
The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine (CSME) installer software. This could allow an authenticated user to potentially enable escalation of privilege via local access.
Recommendations
For versions prior to 2328.5.5.0, update to version 2328.5.5.0 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾