Description

Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Intel Driver & Support Assistant. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DSA Service. By creating a symbolic link, an attacker can abuse the service to write a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-21845.

INFO

Published Date :

2024-05-03T02:14:22.353Z

Last Modified :

2024-08-15T15:50:50.156Z

Source :

zdi
AFFECTED PRODUCTS

The following products are affected by CVE-2023-50197 vulnerability.

Vendors Products
Intel
  • Driver\&support Assistant
  • Driver & Support Assistant
  • Driver \& Support Assistant
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2023-50197.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact