CVE-2023-32279

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthenticated user to potentially enable information disclosure via network access.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-32285.7Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.CVE-2023-322805.3Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated CVE-2023-322817.8The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-CVE-2023-322827.2Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via l CVE-2023-322835.5Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authe CVE-2023-322849.8An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed CVE-2023-322854.4Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acc CVE-2023-322887.8Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to info CVE-2023-322897.8The affected application lacks proper validation of user-supplied data when parsing project files (e.g.., CSP). This could lead to an out-of CVE-2023-32296.5Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.CVE-2023-322907.5The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server.CVE-2023-322915.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MonsterInsights Pro allows Stored XSS.