SecuriTricks - CVE-2023-43753

Description

Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclosure via local access.

Product(s) Impacted

Product	Versions
Intel(R) Processors with Intel(R) SGX	[]

Weaknesses

Common security weaknesses mapped to this vulnerability.

CWE-92

DEPRECATED: Improper Sanitization of Custom Special Characters

This entry has been deprecated. It originally came from PLOVER, which sometimes defined "other" and "miscellaneous" categories in order to satisfy exhaustiveness requirements for taxonomies. Within the context of CWE, the use of a more abstract entry is preferred in mapping situations. CWE-75 is a more appropriate mapping.

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01071.html

CVSS Score

5.3 / 10

CVSS Data - 3.1

Attack Vector: LOCAL
Attack Complexity: HIGH
Privileges Required: HIGH
Scope: CHANGED
Confidentiality Impact: HIGH
Integrity Impact: NONE
Availability Impact: NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N

View Vector String

Timeline

Published: Sept. 16, 2024, 5:16 p.m.
Last Modified: Sept. 16, 2024, 6:03 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

secure@intel.com

CVE-2023-43753