Risk | Low |
Patch available | YES |
Number of vulnerabilities | 1 |
CVE-ID | CVE-2023-49141 |
CWE-ID | CWE-653 |
Exploitation vector | Local |
Public exploit | N/A |
Vulnerable software Subscribe |
4th Generation Intel Xeon Scalable Processors Hardware solutions / Firmware 4th Generation Intel Xeon Platinum processors Hardware solutions / Firmware 4th Generation Intel Xeon Gold Processors Hardware solutions / Firmware 4th Generation Intel Xeon Silver Processors Hardware solutions / Firmware 4th Generation Intel Xeon Bronze Processors Hardware solutions / Firmware Intel Xeon CPU Max Series processors (High Bandwidth Memory HBM) Hardware solutions / Firmware Intel Xeon Scalable Processors with Intel vRAN Hardware solutions / Firmware Intel Xeon Processor E Family Hardware solutions / Firmware 12th Generation Intel Core Processors Hardware solutions / Firmware Intel Pentium Gold Processor Series Hardware solutions / Firmware Intel Celeron Processors Hardware solutions / Firmware 13th Generation Intel Core Processors Hardware solutions / Firmware 4th Generation Intel Xeon Edge Enhanced Processors Hardware solutions / Other hardware appliances Intel Xeon W2400 processor Hardware solutions / Other hardware appliances Intel Xeon W3400 Processor Hardware solutions / Other hardware appliances 13th Generation Intel Core i7 processors Hardware solutions / Other hardware appliances |
Vendor | Intel |
Security Bulletin
This security bulletin contains one low risk vulnerability.
EUVDB-ID: #VU96240
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2023-49141
CWE-ID:
CWE-653 - Improper isolation or compartmentalization
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to an improper isolation in some Intel Processors stream cache mechanism. A local user can execute arbitrary code with elevated privileges.
Install updates from vendor's website.
Vulnerable software versions4th Generation Intel Xeon Scalable Processors: All versions
4th Generation Intel Xeon Platinum processors: All versions
4th Generation Intel Xeon Gold Processors: All versions
4th Generation Intel Xeon Silver Processors: All versions
4th Generation Intel Xeon Bronze Processors: All versions
Intel Xeon CPU Max Series processors (High Bandwidth Memory HBM): All versions
4th Generation Intel Xeon Edge Enhanced Processors: All versions
Intel Xeon Scalable Processors with Intel vRAN: All versions
Intel Xeon W2400 processor: All versions
Intel Xeon W3400 Processor: All versions
Intel Xeon Processor E Family: All versions
12th Generation Intel Core Processors: All versions
Intel Pentium Gold Processor Series: All versions
Intel Celeron Processors: All versions
13th Generation Intel Core Processors: All versions
13th Generation Intel Core i7 processors: All versions
External linkshttp://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01046.html
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.