Skip to main content

Support CVE-2023-33872

MEDIUM
Improper Access Control (CWE-284)
2023-11-14 secure@intel.com
Information Disclosure Google Intel Authentication Bypass Support
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 14, 2023 - 19:15 nvd
MEDIUM 5.5

DescriptionNVD

Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable information disclosure via local access.

AnalysisAI

Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable information disclosure via local access. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable information disclosure via local access. Affected products include: Intel Support.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Support

View all
CVE-2022-30691 MEDIUM
5.5 Nov 11

Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an authe
CVE-2022-27500 MEDIUM
5.5 Aug 18

Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated us
CVE-2023-27392 MEDIUM
4.4 Aug 11

Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privilege
CVE-2022-36367 MEDIUM
4.4 Nov 11

Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privilege

Same weakness CWE-284 – Improper Access Control

View all
CVE-2012-4681 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2012-5076 CRITICAL POC
9.8
CVE-2014-3120 HIGH POC
8.1
CVE-2013-2423 LOW POC
3.7
CVE-2016-3427 CRITICAL
9.8
CVE-2025-12480 CRITICAL POC
9.1

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-33872 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy