CVE-2023-32666

CVSS 3.1 Score 7.2 of 10 (high)

Details

Published Mar 14, 2024
Updated: Apr 5, 2024
CWE ID 1191

Summary

CVE-2023-32666 is a vulnerability affecting certain 4th Generation Intel Xeon Processors. The issue lies in the on-chip debug and test interface, which has improper access control. A privileged user with local access can potentially exploit this vulnerability when Intel SGX or Intel TDX is in use, leading to escalation of privilege. This security flaw could result in significant risk if not addressed promptly by system administrators and organizations. Intel has released updates and patches to mitigate this vulnerability. Users are strongly encouraged to apply these updates to protect against potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share