What is CVE-2023-27298?

CVE-2023-27298 is a high-severity vulnerability in Intel Wake_up_latency_tracer, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2023-05-10.

How severe is CVE-2023-27298?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Intel Wake_up_latency_tracer

CVE-2023-27298

Uncontrolled search path in the WULT software maintained by Intel(R) before version 1.0.0 (commit id 592300b) may allow an unauthenticated user to potentially enable escalation of privilege via network access.

EPSS: 0.007 (46.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Intel Wake_up_latency_tracer
N/a Wult Software Maintained By Intel(r) — versions before version 1.0.0 (commit id 592300b)

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element
CWE-428 — Unquoted Search Path or Element

References

secure@intel.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-27298?: CVE-2023-27298 is a high-severity vulnerability in Intel Wake_up_latency_tracer, classified under Uncontrolled Search Path Element. CVSS score: 8.8/10. Published 2023-05-10.
How severe is CVE-2023-27298?: High severity. CVSS v3 base score is 8.8 out of 10.