CVE-2023-34355

Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.7 MEDIUM
LOCAL
HIGH
LOW
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Affected Products (NVD)
VendorProductVersion
intelintegrated_bmc_video_driver
𝑥
< 1.13.4
intelintegrated_bmc_video_driver
𝑥
< 3.0
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
intel_server_board_m10jnp2sb_integrated_bmc_video_driversintel_server_board_m10jnp2sb_integrated_bmc_video_drive
𝑥
< 3.0_for_micorsoft_windows
ADP
intel_server_board_m10jnp2sb_integrated_bmc_video_driversintel_server_board_m10jnp2sb_integrated_bmc_video_drive
𝑥
< 1.13.4_for_linux
ADP