CVE-2023-45217

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284 CWE-1220

Affected software

Vendor	Product	Versions
n/a	Intel(R) Power Gadget software for Windows	See references
intel	power_gadget_software	*

References

https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.htmlVendor Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.htmlVendor Advisory

Timeline

Published: May 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2023

CVE-2023-452194.4Exposure of Sensitive Information vulnerability exist in an undisclosed BIG-IP TMOS shell (tmsh) command which may allow an authenticated at CVE-2023-45225.3An issue has been discovered in GitLab affecting all versions before 16.2.0. Committing directories containing LF character results in 500 e CVE-2023-452208.8The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol t CVE-2023-452217.8Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privileg CVE-2023-452225.4An attacker with access to the web application that has the vulnerable software could introduce arbitrary JavaScript by injecting a cross-si CVE-2023-452234.3Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full CVE-2023-452259.8Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 IP Cameras with firmware version M2.1.6.05 CVE-2023-452267.4The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credentials that may allow a CVE-2023-452275.4An attacker with access to the web application with vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scrip CVE-2023-452286.5The application suffers from improper access control when editing users. A user with read permissions can manipulate users, passwords, and CVE-2023-452296.5EDK2's Network Package is susceptible to an out-of-bounds read vulnerability when processing the IA_NA or IA_TA option in a DHCPv6 Advertis CVE-2023-45236.1Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker