PT-2024-2700
CVE-2023-28745
·
Published
2024-02-13
·
Updated
2024-02-14
Description by
CVSS 3.1
6.7
MediumMetricsAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Intel QSFP+ Configuration Utility versions all
Description
The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their privileges via local access.
Recommendations
For Intel QSFP+ Configuration Utility versions all, consider restricting local access to the utility until a patch is available. As a temporary workaround, limit the privileges of users who have access to the utility to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾