VDB
CVE-2023-22355
CVE-2023-22355
PUBLISHED
CVSS 6.699999809265137 MEDIUM
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.0.251 may allow an authenticated user to potentially enable escalation of privilege via local access.
EPSS 0.21% · 11.2th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.21%
11.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| intel | oneapi_math_kernel_library | 0, 0 |
| intel | oneapi_iot_toolkit | 0, 0 |
| intel | oneapi_rendering_toolkit | 0, 0 |
| intel | advisor | 0, 0 |
| intel | oneapi_dpc\+\+_library | 0, 0 |
| intel | oneapi_threading_building_blocks | 0, 0 |
| intel | inspector | 0, 0 |
| n/a | Intel(R) oneAPI Toolkit and component software installers | 4.3.0.251 |
| intel | vtune_profiler | 0, 0 |
| intel | oneapi_base_toolkit | 0, 0 |
| intel | oneapi_deep_neural_network_library | 0, 0 |
| intel | ospray_studio | 0, 0 |
| intel | oneapi_hpc_toolkit | 2023.0.0, 0, 2023.0.0 |
| intel | ospray | 0, 0 |
| intel | trace_analyzer_and_collector | 0, 0 |
| intel | cpu_runtime | 0, 0 |
| intel | oneapi_data_analytics_library | 0, 0 |
| intel | embree_ray_tracing_kernel_library | 0, 0 |
| intel | oneapi_video_processing_library | 0, 0 |
| intel | open_volume_kernel_library | 0, 0 |
…and 10 more
Timeline
- May 10, 2023 CVE Published
- May 11, 2023 EPSS Score
- Jun 17, 2023 EPSS Score
- Jul 24, 2023 EPSS Score
- Aug 29, 2023 EPSS Score
- Oct 5, 2023 EPSS Score
- Nov 11, 2023 EPSS Score
- Dec 18, 2023 EPSS Score
- Jan 23, 2024 EPSS Score
- Feb 29, 2024 EPSS Score
- Apr 6, 2024 EPSS Score
- May 13, 2024 EPSS Score
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00825.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00832.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00886.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00692.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00819.html url
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00802.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00799.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00816.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00854.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00772.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00780.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00784.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00824.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00792.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00807.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00815.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00853.html advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00855.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-22355 advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00796.html advisory
…and 18 more