Vulnerability Description
Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Intel | Quickassist Technology Library | 22.07.1 |
| Microsoft | Windows | - |
| Intel | Quickassist Technology | >= 1.0, < 1.10 |
| Intel | Quickassist Technology Firmware | - |
Related Weaknesses (CWE)
References
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.Vendor Advisory
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00861.Vendor Advisory
FAQ
What is CVE-2023-28740?
CVE-2023-28740 is a vulnerability with a CVSS score of 6.7 (MEDIUM). Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potentially enable escalation of privilege via local ...
How severe is CVE-2023-28740?
CVE-2023-28740 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-28740?
Check the references section above for vendor advisories and patch information. Affected products include: Intel Quickassist Technology Library, Microsoft Windows, Intel Quickassist Technology, Intel Quickassist Technology Firmware.