Unison Software CVE-2023-39411

MEDIUM

Improper Input Validation (CWE-20)

2023-11-14 secure@intel.com

Denial Of Service Intel Unison Software

4.4

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Nov 14, 2023 - 19:15 nvd

MEDIUM 4.4

DescriptionNVD

Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.

AnalysisAI

Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-20. Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. Affected products include: Intel Unison Software.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Unison Software

View all

CVE-2023-39412 HIGH This Week

Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalatio

CVE-2023-39221 HIGH This Week

Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation

CVE-2023-36860 HIGH This Week

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio

CVE-2023-22663 HIGH This Week

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation

CVE-2023-38570 HIGH This Week

Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentia

CVE-2023-22292 HIGH This Week

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of pr

CVE-2023-39228 HIGH This Week

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

CVE-2023-22337 HIGH This Week

Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial

CVE-2023-22285 HIGH This Week

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of

CVE-2023-22448 HIGH This Week

Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of p

CVE-2023-38131 MEDIUM This Month

Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable deni

CVE-2023-22290 MEDIUM This Month

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of servic

Same weakness CWE-20 – Improper Input Validation

View all

CVE-2021-44228 CRITICAL POC

CVE-2024-3400 CRITICAL POC

CVE-2022-47966 CRITICAL POC

CVE-2023-22515 CRITICAL POC

CVE-2009-0927 HIGH POC

CVE-2017-9791 CRITICAL POC

CVE-2017-15944 CRITICAL POC

CVE-2019-0604 CRITICAL POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2023-39411 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy