CVE-2023-27519 - OpenCVE

Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Intel	Optane Memory H20 With Solid State Storage Optane Memory H20 With Solid State Storage Firmware Optane Ssd 900p Optane Ssd 900p Firmware Optane Ssd 905p Optane Ssd 905p Firmware Optane Ssd Dc P4800x Optane Ssd Dc P4800x Firmware Optane Ssd Dc P4801x Optane Ssd Dc P4801x Firmware

Configuration 1 [-]

AND

cpe:2.3:o:intel:optane_memory_h20_with_solid_state_storage_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:optane_memory_h20_with_solid_state_storage:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:intel:optane_ssd_900p_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:optane_ssd_900p:-:*:*:*:*:*:*:*

Configuration 3 [-]

AND

cpe:2.3:o:intel:optane_ssd_dc_p4800x_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:optane_ssd_dc_p4800x:-:*:*:*:*:*:*:*

Configuration 4 [-]

AND

cpe:2.3:o:intel:optane_ssd_dc_p4801x_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:optane_ssd_dc_p4801x:-:*:*:*:*:*:*:*

Configuration 5 [-]

AND

cpe:2.3:o:intel:optane_ssd_905p_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:intel:optane_ssd_905p:-:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: intel

Published: 2023-11-14T19:04:55.720Z

Updated: 2024-08-02T12:16:35.538Z

Reserved: 2023-03-08T04:00:03.724Z

Link: CVE-2023-27519

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2023-11-14T19:15:21.253

Modified: 2023-11-29T18:15:41.620

Link: CVE-2023-27519

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_memory_h20_with_solid_state_storage_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "FA3AE360-6625-4682-9E17-32BCEE976552", "versionEndExcluding": "u4110553-g004", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:optane_memory_h20_with_solid_state_storage:-:*:*:*:*:*:*:*", "matchCriteriaId": "00EFD6D0-2B8B-4450-A073-C6121264C94F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_ssd_900p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "4E6363E3-64FC-4D8C-9779-B140AC0F9FE0", "versionEndExcluding": "e2010650", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:optane_ssd_900p:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AFC9CF7-581F-4B2D-B93C-3D7E3C136F4C", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_ssd_dc_p4800x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9D850E02-9A03-49A8-86F4-1D2B9203143D", "versionEndExcluding": "e2010650", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:optane_ssd_dc_p4800x:-:*:*:*:*:*:*:*", "matchCriteriaId": "FE6F7C04-DA32-42BC-9C5F-651DF61E5589", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_ssd_dc_p4801x_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "A73436E5-92D0-4C3A-AF56-8551ABAF04F9", "versionEndExcluding": "e2010650", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:optane_ssd_dc_p4801x:-:*:*:*:*:*:*:*", "matchCriteriaId": "15DAAAC1-DBA7-47BC-8796-B7C8B86DEFD0", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:intel:optane_ssd_905p_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "AFDD04FB-5301-42FF-AA92-FD0BC5CD26EE", "versionEndExcluding": "e2010650", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:intel:optane_ssd_905p:-:*:*:*:*:*:*:*", "matchCriteriaId": "2BD5595C-0047-441A-B398-8ACA421BB439", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privilege via local access."}, {"lang": "es", "value": "La validaci\u00f3n de entrada incorrecta en el firmware para algunos productos Intel(R) Optane(TM) SSD puede permitir que un usuario privilegiado habilite potencialmente la escalada de privilegios a trav\u00e9s del acceso local."}], "id": "CVE-2023-27519", "lastModified": "2023-11-29T18:15:41.620", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 1.1, "impactScore": 5.3, "source": "secure@intel.com", "type": "Secondary"}]}, "published": "2023-11-14T19:15:21.253", "references": [{"source": "secure@intel.com", "tags": ["Vendor Advisory"], "url": "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00758.html"}], "sourceIdentifier": "secure@intel.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-20"}], "source": "secure@intel.com", "type": "Secondary"}]}