CVE-2023-31271

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	Intel(R) VROC software	before version 8.0.8.1001
intel	vroc_software	< 8.0.8.1001

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.htmlVendor Advisory

Timeline

Published: Feb 14, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-312729.8A stack-based buffer overflow vulnerability exists in the httpd do_wds functionality of Yifan YF325 v1.0_20221108. A specially crafted netwo CVE-2023-312739.8Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalatio CVE-2023-312745.3AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Me CVE-2023-312757.8An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel fil CVE-2023-312768.2Heap-based buffer overflow in BMC Firmware for the Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600 CVE-2023-312777.5PiiGAB M-Bus transmits credentials in plaintext format.CVE-2023-312787.8Horner Automation Cscape lacks proper validation of user-supplied data when parsing project files (e.g., HMI). This could lead to an out-of-CVE-2023-312798.1The AirVantage platform is vulnerable to an unauthorized attacker registering previously unregistered devices on the AirVantage platform wh CVE-2023-31289.8Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily mod CVE-2023-312805.3An AirVantage online Warranty Checker tool vulnerability could allow an attacker to perform bulk enumeration of IMEI and Serial Numbers pai CVE-2023-312847.8illumos illumos-gate before 676abcb has a stack buffer overflow in /dev/net, leading to privilege escalation via a stat on a long file name CVE-2023-312856.1An XSS issue was discovered in Serenity Serene (and StartSharp) before 6.7.0. When users upload temporary files, some specific file endings