CVE-2023-42668

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
May 16, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-426696.5A vulnerability was found in Samba's "rpcecho" development server, a non-Windows RPC server used to test Samba's DCE/RPC stack elements. ThiCVE-2023-426706.5A flaw was found in Samba. It is susceptible to a vulnerability where multiple incompatible RPC listeners can be initiated, causing disruptiCVE-2023-426715.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426725.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426735.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426745.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426755.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426765.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426775.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426785.5In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locCVE-2023-426794.4In gpu driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SystemCVE-2023-426804.4In gpu driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System
CVE-2023-42668: Medium severity, CVSS 6.7 | Vulnix