CVE-2023-28745

Summary

CVE-2023-28745 is a vulnerability affecting Intel(R) QSFP+ Configuration Utility software. An authenticated user can exploit an uncontrolled search path within this software, potentially enabling privilege escalation through local access. This issue poses a risk as it allows escalation beyond the intended user level, increasing the attack surface for malicious actors. The software's all versions are susceptible to this vulnerability, necessitating an update or patch to mitigate the threat. Intel has been advised to address this issue promptly to prevent potential misuse.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.