Driver Support Assistant
CVE-2023-27515
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.
AnalysisAI
Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access. Rated critical severity (CVSS 9.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Technical ContextAI
This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access. Affected products include: Intel Driver \& Support Assistant. Version information: version 23.1.9.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.
More in Driver Support Assistant
View allImproper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to poten
Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to
Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potent
Improper permissions in the Intel(R) Driver & Support Assistant before version 20.7.26.7 may allow an authenticated user
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to pote
Improper file verification in Intel® Driver & Support Assistant before 19.7.30.2 may allow an authenticated user to pote
Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated
Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentiall
Insufficient input validation in the Intel Driver & Support Assistant before 3.6.0.4 may allow an unauthenticated user t
SEMA driver in Intel Driver and Support Assistant before version 3.1.1 allows a local attacker the ability to read and w
Incorrect default permissions in the Intel(R) DSA before version 20.8.30.6 may allow an authenticated user to potentiall
Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially ena
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today