CVE-2023-43748

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

Vendor	Product	Versions
n/a	Intel(R) GPA Framework software installers	before version 2023.3
intel	graphics_performance_analyzer	< 2023.3

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.htmlVendor Advisory

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-437516.7Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before ve CVE-2023-437528.0OS command injection vulnerability in WRC-X3000GS2-W v1.05 and earlier, WRC-X3000GS2-B v1.05 and earlier, and WRC-X3000GS2A-B v1.05 and earl CVE-2023-437535.3Improper conditions check in some Intel(R) Processors with Intel(R) SGX may allow a privileged user to potentially enable information disclo CVE-2023-437544.3Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowi CVE-2023-437559.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.0 CVE-2023-437565.5in OpenHarmony v3.2.4 and prior versions allow a local attacker causes information leak through out-of-bounds Read.CVE-2023-437576.5Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD. and LOGITEC CORPORATION allows a network-adjace CVE-2023-437588.2Improper input validation in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of priv CVE-2023-43764.8The Serial Codes Generator and Validator with WooCommerce Support WordPress plugin before 2.4.15 does not sanitise and escape some of its se CVE-2023-437607.5Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Se CVE-2023-437617.5Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security CVE-2023-437629.8Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager