Skip to main content

Advisor CVE-2023-27383

MEDIUM
Protection Mechanism Failure (CWE-693)
2023-11-14 secure@intel.com
Privilege Escalation Intel Advisor Inspector Mpi Library Oneapi Base Toolkit Oneapi Hpc Toolkit
6.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.8 MEDIUM
AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 19:15 nvd
MEDIUM 6.8

DescriptionNVD

Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access.

AnalysisAI

Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity.

Technical ContextAI

This vulnerability is classified under CWE-693. Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access. Affected products include: Intel Advisor, Intel Inspector, Intel Mpi Library, Intel Oneapi Base Toolkit, Intel Oneapi Hpc Toolkit. Version information: version 2021.9.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Advisor

View all
CVE-2023-1767 MEDIUM POC
5.4 Apr 20

The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. Rated mediu
CVE-2024-21772 HIGH
7.8 May 16

Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pote
CVE-2023-24592 HIGH
7.8 Nov 14

Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated
CVE-2023-22355 HIGH
7.8 May 10

Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may

CVE-2022-21128 HIGH
7.8 May 12

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated
CVE-2017-5682 HIGH
7.3 Feb 28

Intel PSET Application Install wrapper of Intel Parallel Studio XE, Intel System Studio, Intel VTune Amplifier, Intel In
CVE-2024-39284 MEDIUM
5.4 Feb 12

Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to pot
CVE-2025-20079 MEDIUM
5.4 May 13

Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escala
CVE-2024-26025 MEDIUM
5.4 Aug 14

Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user t

Same weakness CWE-693 – Protection Mechanism Failure

View all
CVE-2013-2465 CRITICAL POC
9.8
CVE-2013-0431 MEDIUM POC
5.3
CVE-2025-40536 HIGH POC
8.1
CVE-2026-21513 HIGH
8.8
CVE-2026-21510 HIGH POC
8.8
CVE-2026-32202 MEDIUM POC
4.3
CVE-2017-10952 HIGH POC
8.8
CVE-2022-32845 CRITICAL POC
10.0

Same technique Privilege Escalation

View all
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2017-5689 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8
CVE-2016-10372 CRITICAL POC
9.8
CVE-2014-9583 CRITICAL POC
10.0
CVE-2012-0297 CRITICAL POC
10.0

Share

CVE-2023-27383 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy