CVE-2023-32646

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

Vendor	Product	Versions
n/a	Intel(R) VROC software	before version 8.0.8.1001
intel	virtual_raid_on_cpu	< 8.0.8.1001

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00953.htmlVendor Advisory

Timeline

Published: Feb 14, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-326477.8Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalat CVE-2023-326497.5A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the CVE-2023-32659.8An authentication bypass exists on CyberPower PowerPanel Enterprise by failing to sanitize meta-characters from the username, allowing an at CVE-2023-326507.8An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit bi CVE-2023-326516.5Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.24 CVE-2023-326526.1PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks.CVE-2023-326538.8An out-of-bounds write vulnerability exists in the dcm_pixel_data_decode functionality of Accusoft ImageGear 20.1. A specially crafted malfo CVE-2023-326546.5A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.5. A user may be able to read informatio CVE-2023-326557.3Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software before CVE-2023-326567.8Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an aut CVE-2023-326577.5Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints f CVE-2023-326587.3Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may a