CVE-2023-42099

Name of the Vulnerable Software and Affected Versions Intel Driver & Support Assistant (affected versions not specified)

Description The issue is related to incorrect link resolution before accessing a file in the DSA service of Intel Driver & Support Assistant. This allows a local attacker to escalate privileges on affected installations by creating a symbolic link to abuse the service and delete a file, potentially executing arbitrary code in the context of SYSTEM. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.