PT-2024-2740

CVE-2023-34315

Published

2024-02-13

Updated

2024-10-28

Description by

CVSS 3.1

7.8

High

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Intel VROC software versions prior to 8.0.8.1001

Description The issue is related to incorrect default permissions in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is a problem with the implementation of the RAID array creation technology based on Intel VROC chipsets, where standard permissions are used incorrectly.

Recommendations For versions prior to 8.0.8.1001, update to version 8.0.8.1001 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

J00Sean

Vendors

Affected products

Weakness enumeration

CWE-276: Incorrect Default Permissions

Related identifiers

CVE-2023-34315