PT-2024-2700

CVE-2023-28745

·

Published

2024-02-13

·

Updated

2024-02-14

Description by

CVSS 3.1
6.7
Medium
MetricsAV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Intel QSFP+ Configuration Utility versions all
Description The issue is related to an uncontrolled search path element in the Intel QSFP+ Configuration Utility software. This could potentially allow an authenticated user to escalate their privileges via local access.
Recommendations For Intel QSFP+ Configuration Utility versions all, consider restricting local access to the utility until a patch is available. As a temporary workaround, limit the privileges of users who have access to the utility to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾