CVE-2023-23580

CVSS 4.8 MEDIUMEPSS 0.2%CWE-121

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 4.8EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

10 May 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Stack-based buffer overflow for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potentially escalation of privilege via local access.

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Affected products

n/a · Intel(R) Trace Analyzer and Collector software

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00805.html