Oneapi Base Toolkit
CVE-2023-30763
MEDIUM
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.
AnalysisAI
Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity.
Technical ContextAI
This vulnerability is classified under CWE-122. Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access. Affected products include: Intel Battery Life Diagnostic Tool, Intel Oneapi Base Toolkit, Intel Soc Watch. Version information: version 2021.1.
RemediationAI
A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Oneapi Base Toolkit
View allUncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pote
Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated
Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to po
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may
Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may a
Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authent
Uncontrolled search path for some Intel(R) Advisor software before version 2024.2 may allow an authenticated user to pot
Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escala
Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authe
Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Privilege Escalation
View allShare
External POC / Exploit Code
Leaving vuln.today