CVE Feed

    Dashboard / CVE / CVE-2023-27517

    CVE-2023-27517

    Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.

    Published:Feb 14, 2024
    Last Modified:Feb 20, 2025
    EPS:Feb 14, 2024
    EPSS Score:0.00082
    CVSS Score:6.6

    Affected Products

    Vendor
    Intel
    Product
    Nma1xxd128gpsu4
    Vendor
    Intel
    Product
    Nma1xxd128gpsuf
    Vendor
    Intel
    Product
    Nma1xxd256gpsu4
    Vendor
    Intel
    Product
    Nma1xxd256gpsuf
    Vendor
    Intel
    Product
    Nma1xxd512gpsu4
    Vendor
    Intel
    Product
    Nma1xxd512gpsuf
    Vendor
    Intel
    Product
    Nmb1xxd128gpsu4
    Vendor
    Intel
    Product
    Nmb1xxd128gpsuf
    Vendor
    Intel
    Product
    Nmb1xxd256gpsu4
    Vendor
    Intel
    Product
    Nmb1xxd256gpsuf
    Vendor
    Intel
    Product
    Nmb1xxd512gpsu4
    Vendor
    Intel
    Product
    Nmb1xxd512gpsuf
    Vendor
    Intel
    Product
    Nmc2xxd128gpsu4
    Vendor
    Intel
    Product
    Nmc2xxd256gpsu4
    Vendor
    Intel
    Product
    Nmc2xxd512gpsu4
    Vendor
    Intel
    Product
    Optane Persistent Memory Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High