Paper/Archive/CVE-2023-27515

CVE-2023-27515

intel — Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escal…

EPSS 0.6%CVSS 9.6

critical.is priorityof 100

CVSS 9.6 (NVD)9.6 / 10 × 3028.8 Not in CISA KEV+300.0 EPSS percentile 47.2.472 × 209.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalation of privilege via network access.

Affected

ProductAffectedFixed inSource

Intel(R) DSA softwarebefore version 23.1.9–CNA

Scores by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

intel (CNA)8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintel.com/content/www/us/en/security-center/advisory/intel-sa-00878.html