CVE-2023-48361

LowCVSS 2.3/10Last modified Jun 17, 2026

Description

Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 2.3/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-665

Affected software

No affected versions have been published.

Timeline

Published
Aug 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-483628.8XXE in the XML Format Plugin in Apache Drill version 1.19.0 and greater allows a user to read any file on a remote file system or execute coCVE-2023-483636.5A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMCVE-2023-483646.5A vulnerability has been identified in OpenPCS 7 V9.1 (All versions < V9.1 SP2 UC05), SIMATIC BATCH V9.1 (All versions < V9.1 SP2 UC05), SIMCVE-2023-483659.9Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683. Due to improper valCVE-2023-483665.3Race condition in some Intel(R) System Security Report and System Resources Defense firmware may allow a privileged user to potentially enabCVE-2023-483685.5Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of servicCVE-2023-483695.3Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to poteCVE-2023-48378.8SmodBIP is vulnerable to Cross-Site Request Forgery, that could be used to induce logged in users to perform unintended actions, including cCVE-2023-483719.8ITPison OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can eCVE-2023-483729.8ITPison OMICARD EDM 's SMS-related function has insufficient validation for user input. An unauthenticated remote attacker can exploit this CVE-2023-483737.5ITPison OMICARD EDM has a path traversal vulnerability within its parameter “FileName” in a specific function. An unauthenticated remote attCVE-2023-483746.5SmartStar Software CWS is a web-base integration platform, it has a vulnerability of using a hard-coded for a specific account with low priv
CVE-2023-48361: Low severity, CVSS 2.3 | Vulnix