CVE-2023-27517 - Vulnerability Details

Vendors	Products
Intel	Nma1xxd128gpsu4 Nma1xxd128gpsuf Nma1xxd256gpsu4 Nma1xxd256gpsuf Nma1xxd512gpsu4 Nma1xxd512gpsuf Nmb1xxd128gpsu4 Nmb1xxd128gpsuf Nmb1xxd256gpsu4 Nmb1xxd256gpsuf Nmb1xxd512gpsu4 Nmb1xxd512gpsuf Nmc2xxd128gpsu4 Nmc2xxd256gpsu4 Nmc2xxd512gpsu4 Optane Persistent Memory Firmware

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html

Type	Values Removed	Values Added
First Time appeared		Intel Intel nma1xxd128gpsu4 Intel nma1xxd128gpsuf Intel nma1xxd256gpsu4 Intel nma1xxd256gpsuf Intel nma1xxd512gpsu4 Intel nma1xxd512gpsuf Intel nmb1xxd128gpsu4 Intel nmb1xxd128gpsuf Intel nmb1xxd256gpsu4 Intel nmb1xxd256gpsuf Intel nmb1xxd512gpsu4 Intel nmb1xxd512gpsuf Intel nmc2xxd128gpsu4 Intel nmc2xxd256gpsu4 Intel nmc2xxd512gpsu4 Intel optane Persistent Memory Firmware
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:h:intel:nma1xxd128gpsu4:-:::::::* cpe:2.3:h:intel:nma1xxd128gpsuf:-:::::::* cpe:2.3:h:intel:nma1xxd256gpsu4:-:::::::* cpe:2.3:h:intel:nma1xxd256gpsuf:-:::::::* cpe:2.3:h:intel:nma1xxd512gpsu4:-:::::::* cpe:2.3:h:intel:nma1xxd512gpsuf:-:::::::* cpe:2.3:h:intel:nmb1xxd128gpsu4:-:::::::* cpe:2.3:h:intel:nmb1xxd128gpsuf:-:::::::* cpe:2.3:h:intel:nmb1xxd256gpsu4:-:::::::* cpe:2.3:h:intel:nmb1xxd256gpsuf:-:::::::* cpe:2.3:h:intel:nmb1xxd512gpsu4:-:::::::* cpe:2.3:h:intel:nmb1xxd512gpsuf:-:::::::* cpe:2.3:h:intel:nmc2xxd128gpsu4:-:::::::* cpe:2.3:h:intel:nmc2xxd256gpsu4:-:::::::* cpe:2.3:h:intel:nmc2xxd512gpsu4:-:::::::* cpe:2.3:o:intel:optane_persistent_memory_firmware::::::::
Vendors & Products		Intel Intel nma1xxd128gpsu4 Intel nma1xxd128gpsuf Intel nma1xxd256gpsu4 Intel nma1xxd256gpsuf Intel nma1xxd512gpsu4 Intel nma1xxd512gpsuf Intel nmb1xxd128gpsu4 Intel nmb1xxd128gpsuf Intel nmb1xxd256gpsu4 Intel nmb1xxd256gpsuf Intel nmb1xxd512gpsu4 Intel nmb1xxd512gpsuf Intel nmc2xxd128gpsu4 Intel nmc2xxd256gpsu4 Intel nmc2xxd512gpsu4 Intel optane Persistent Memory Firmware

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-27517", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "state": "PUBLISHED", "assignerShortName": "intel", "dateReserved": "2023-03-29T03:00:02.583Z", "datePublished": "2024-02-14T13:38:00.967Z", "dateUpdated": "2024-08-16T15:51:16.583Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2024-02-14T13:38:00.967Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "description": "Improper access control", "cweId": "CWE-284", "type": "CWE"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) Optane(TM) PMem software", "versions": [{"version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483", "status": "affected"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access."}], "references": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 6.6, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:16:35.539Z"}, "title": "CVE Program Container", "references": [{"name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "intel", "product": "optane_persistent_memory_firmware", "cpes": ["cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "0", "status": "affected", "lessThan": "01.00.00.3547", "versionType": "custom"}, {"version": "02.00.00.0000", "status": "affected", "lessThan": "02.00.00.3915", "versionType": "custom"}, {"version": "03.00.00.0000", "status": "affected", "lessThan": "03.00.00.0483", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-08-13T19:23:57.345801Z", "id": "CVE-2023-27517", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T15:51:16.583Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-27517 (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

state : PUBLISHED (string)

assignerShortName : intel (string)

dateReserved : 2023-03-29T03:00:02.583Z (string)

datePublished : 2024-02-14T13:38:00.967Z (string)

dateUpdated : 2024-08-16T15:51:16.583Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2024-02-14T13:38:00.967Z (string)

}

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

description : Improper access control (string)

cweId : CWE-284 (string)

type : CWE (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) Optane(TM) PMem software (string)

versions : [ »

0 : { »

version : before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 (string)

status : affected (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access. (string)

}

]

references : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : LOW (string)

userInteraction : REQUIRED (string)

scope : UNCHANGED (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T12:16:35.539Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : intel (string)

product : optane_persistent_memory_firmware (string)

cpes : [ »

0 : cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unaffected (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 01.00.00.3547 (string)

versionType : custom (string)

}

1 : { »

version : 02.00.00.0000 (string)

status : affected (string)

lessThan : 02.00.00.3915 (string)

versionType : custom (string)

}

2 : { »

version : 03.00.00.0000 (string)

status : affected (string)

lessThan : 03.00.00.0483 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-08-13T19:23:57.345801Z (string)

id : CVE-2023-27517 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-16T15:51:16.583Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:16:35.539Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-27517", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-13T19:23:57.345801Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:*"], "vendor": "intel", "product": "optane_persistent_memory_firmware", "versions": [{"status": "affected", "version": "0", "lessThan": "01.00.00.3547", "versionType": "custom"}, {"status": "affected", "version": "02.00.00.0000", "lessThan": "02.00.00.3915", "versionType": "custom"}, {"status": "affected", "version": "03.00.00.0000", "lessThan": "03.00.00.0483", "versionType": "custom"}], "defaultStatus": "unaffected"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-07T20:29:25.301Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "n/a", "product": "Intel(R) Optane(TM) PMem software", "versions": [{"status": "affected", "version": "before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html", "name": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html"}], "descriptions": [{"lang": "en", "value": "Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "escalation of privilege"}, {"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper access control"}]}], "providerMetadata": {"orgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "shortName": "intel", "dateUpdated": "2024-02-14T13:38:00.967Z"}}}, "cveMetadata": {"cveId": "CVE-2023-27517", "state": "PUBLISHED", "dateUpdated": "2024-08-16T15:51:16.583Z", "dateReserved": "2023-03-29T03:00:02.583Z", "assignerOrgId": "6dda929c-bb53-4a77-a76d-48e79601a1ce", "datePublished": "2024-02-14T13:38:00.967Z", "assignerShortName": "intel"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T12:16:35.539Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-27517 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-08-13T19:23:57.345801Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:* (string)

]

vendor : intel (string)

product : optane_persistent_memory_firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 01.00.00.3547 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 02.00.00.0000 (string)

lessThan : 02.00.00.3915 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 03.00.00.0000 (string)

lessThan : 03.00.00.0483 (string)

versionType : custom (string)

}

]

defaultStatus : unaffected (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-08-07T20:29:25.301Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.6 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : REQUIRED (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : LOW (string)

confidentialityImpact : NONE (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : Intel(R) Optane(TM) PMem software (string)

versions : [ »

0 : { »

status : affected (string)

version : before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

name : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : escalation of privilege (string)

}

1 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-284 (string)

description : Improper access control (string)

}

]

}

]

providerMetadata : { »

orgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

shortName : intel (string)

dateUpdated : 2024-02-14T13:38:00.967Z (string)

}

cveMetadata : { »

cveId : CVE-2023-27517 (string)

state : PUBLISHED (string)

dateUpdated : 2024-08-16T15:51:16.583Z (string)

dateReserved : 2023-03-29T03:00:02.583Z (string)

assignerOrgId : 6dda929c-bb53-4a77-a76d-48e79601a1ce (string)

datePublished : 2024-02-14T13:38:00.967Z (string)

assignerShortName : intel (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "EC0ABBD3-228C-4F02-8BC9-2545FC57E49A", "versionEndExcluding": "01.00.00.3547", "versionStartIncluding": "01.00.00.3072", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nma1xxd128gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "3EA3959A-A077-420F-9CF0-FCF926F78A1B", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nma1xxd128gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "C49C3C48-9452-417D-91A3-6282A5DF564E", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nma1xxd256gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "5DF7A9E1-9610-42F8-BE3C-50B6C70EC2CE", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nma1xxd256gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "E29B5FFA-FD00-490D-9E33-2ADC23369773", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nma1xxd512gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "77357E64-833C-46E7-B84F-29F7ED3D0F31", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nma1xxd512gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "1E373F80-B81E-4B7F-9407-DD918E39DA90", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "3CA941AF-27A6-47B7-B2BC-1D9A88444664", "versionEndExcluding": "02.00.00.3915", "versionStartIncluding": "02.00.00.3423", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nmb1xxd128gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "CBED201B-A64E-441E-A952-B3C8C56F87C1", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmb1xxd128gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "29CD8FF9-DA6B-4293-8F4B-8B4A02C4C1E8", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmb1xxd256gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "905C0399-6E5D-4D42-AA3D-D0ECC9117D9A", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmb1xxd256gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "2E7380A6-CB51-4205-AAD7-AB75AB2638B5", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmb1xxd512gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "A86746AA-047D-4F7F-BD7F-0D18BF47F5EE", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmb1xxd512gpsuf:-:*:*:*:*:*:*:*", "matchCriteriaId": "3A3BC795-DAA0-48C5-BEBC-4A96B4FD3D0F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "C5AB913F-BA30-4911-BC6F-083DFF14F9E6", "versionEndExcluding": "03.00.00.0483", "versionStartIncluding": "03.00.00.0302", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:nmc2xxd128gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "8D76D5AB-0CF5-40E5-8DA5-31E27F58F236", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmc2xxd256gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "541DF110-3539-4F20-BAE9-039A969B1763", "vulnerable": false}, {"criteria": "cpe:2.3:h:intel:nmc2xxd512gpsu4:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F1535ED-13DC-4C08-BA2D-E8BE50C4A6CD", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "El control de acceso inadecuado en algunos software Intel(R) Optane(TM) PMem anteriores a las versiones 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 puede permitir que un usuario autentificado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."}], "id": "CVE-2023-27517", "lastModified": "2025-02-20T15:10:10.427", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.3, "impactScore": 5.2, "source": "secure@intel.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2024-02-14T14:15:47.313", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "secure@intel.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EC0ABBD3-228C-4F02-8BC9-2545FC57E49A (string)

versionEndExcluding : 01.00.00.3547 (string)

versionStartIncluding : 01.00.00.3072 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:nma1xxd128gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3EA3959A-A077-420F-9CF0-FCF926F78A1B (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:nma1xxd128gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C49C3C48-9452-417D-91A3-6282A5DF564E (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:nma1xxd256gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 5DF7A9E1-9610-42F8-BE3C-50B6C70EC2CE (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:intel:nma1xxd256gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E29B5FFA-FD00-490D-9E33-2ADC23369773 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:intel:nma1xxd512gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 77357E64-833C-46E7-B84F-29F7ED3D0F31 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:intel:nma1xxd512gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E373F80-B81E-4B7F-9407-DD918E39DA90 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 3CA941AF-27A6-47B7-B2BC-1D9A88444664 (string)

versionEndExcluding : 02.00.00.3915 (string)

versionStartIncluding : 02.00.00.3423 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:nmb1xxd128gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CBED201B-A64E-441E-A952-B3C8C56F87C1 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:nmb1xxd128gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 29CD8FF9-DA6B-4293-8F4B-8B4A02C4C1E8 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:nmb1xxd256gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 905C0399-6E5D-4D42-AA3D-D0ECC9117D9A (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:intel:nmb1xxd256gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2E7380A6-CB51-4205-AAD7-AB75AB2638B5 (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:intel:nmb1xxd512gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A86746AA-047D-4F7F-BD7F-0D18BF47F5EE (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:intel:nmb1xxd512gpsuf:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3A3BC795-DAA0-48C5-BEBC-4A96B4FD3D0F (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:intel:optane_persistent_memory_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C5AB913F-BA30-4911-BC6F-083DFF14F9E6 (string)

versionEndExcluding : 03.00.00.0483 (string)

versionStartIncluding : 03.00.00.0302 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:intel:nmc2xxd128gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8D76D5AB-0CF5-40E5-8DA5-31E27F58F236 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:intel:nmc2xxd256gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 541DF110-3539-4F20-BAE9-039A969B1763 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:intel:nmc2xxd512gpsu4:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3F1535ED-13DC-4C08-BA2D-E8BE50C4A6CD (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access. (string)

}

1 : { »

lang : es (string)

value : El control de acceso inadecuado en algunos software Intel(R) Optane(TM) PMem anteriores a las versiones 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 puede permitir que un usuario autentificado habilite potencialmente la escalada de privilegios a través del acceso local. (string)

}

]

id : CVE-2023-27517 (string)

lastModified : 2025-02-20T15:10:10.427 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.6 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.3 (number)

impactScore : 5.2 (number)

source : secure@intel.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2024-02-14T14:15:47.313 (string)

references : [ »

0 : { »

source : secure@intel.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00948.html (string)

}

]

sourceIdentifier : secure@intel.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : secure@intel.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction Required

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction Required

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object