CVE-2023-25769

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published
Feb 14, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-257707.5Controller DoS may occur due to buffer overflow when an error is generated in response to a specially crafted message. See Honeywell SecuritCVE-2023-257715.5Improper access control for some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acCVE-2023-257725.5Improper input validation in the Intel(R) Retail Edge Mobile Android application before version 3.0.301126-RELEASE may allow an authenticateCVE-2023-257737.8Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated userCVE-2023-257747.5A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially craftedCVE-2023-257759.8Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user toCVE-2023-257764.4Improper input validation in some Intel(R) Server Board BMC firmware before version 2.90 may allow a privileged user to enable information dCVE-2023-257777.9Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentCVE-2023-257796.7Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user CVE-2023-25784.8The Buy Me a Coffee WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users suCVE-2023-257805.7It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with noCVE-2023-257814.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Sebastian Krysmanski Upload File Type Settings plugin <= 1.1 versions.