CVE-2023-22311: High severity intel optane pmem software vulnerability
Published Feb 14, 2024
·Updated
Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access.
Affected Software
8 affected components
Intel Optane PMem 100 Series Management Software<01.00.00.3547
All of the following
Intel Optane Persistent Memory Firmware<01.00.00.3547
Any of the following
Intel Nma1xxd128gpsu4
Intel Nma1xxd128gpsuf
Intel Nma1xxd256gpsu4
Intel Nma1xxd256gpsuf
Intel Nma1xxd512gpsu4
Intel Nma1xxd512gpsuf
Event History
Feb 14, 2024
CVE Published
via MITRE·01:38 PM
Data Sourced
via MITRE·01:38 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Oct 23, 57112
Event
via NVD·10:50 AM
Frequently Asked Questions
1
What is the severity of CVE-2023-22311?
CVE-2023-22311 has a medium severity rating due to improper access control vulnerabilities.
2
How do I fix CVE-2023-22311?
To fix CVE-2023-22311, upgrade the Intel Optane PMem 100 Series Management Software to version 01.00.00.3547 or later.
3
Who is affected by CVE-2023-22311?
CVE-2023-22311 affects users of Intel Optane PMem 100 Series Management Software versions prior to 01.00.00.3547.
4
What can attackers achieve with CVE-2023-22311?
Attackers can potentially escalate privileges on the affected systems through local access due to this vulnerability.
5
Is CVE-2023-22311 a remote or local vulnerability?
CVE-2023-22311 is a local vulnerability that requires an authenticated user to exploit.