PT-2023-9799
CVE-2023-45745
·
Published
2023-11-27
·
Updated
2025-03-26
Description by
CVSS 3.1
8.2
HighMetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel(R) TDX module software versions prior to 1.5.05.46.698
Description
The issue is related to improper input validation in the Intel(R) TDX module software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to a potential system compromise.
Recommendations
For versions prior to 1.5.05.46.698, upgrade the affected component to mitigate the risk. As a temporary workaround, consider restricting local access to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾