Vulnerability · Published Nov 14, 2023 · Assigned by intel
CVE-2023-32279
High 7.5
In plain English
A high-severity improper access control in Intel(R) Connectivity Performance Suite. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 50.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthenticated user to potentially enable information disclosure via network access.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | Intel(R) Connectivity Performance Suite | before version 2.1123.214.2 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N