CVE-2023-38420: Low severity Intel Power Gadget vulnerability
Published May 16, 2024
·Updated
Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure via local access.
Affected Software
3 affected components
Intel Power Gadget<=all versions
All of the following
Intel Power Gadget
Apple macOS
Event History
May 16, 2024
CVE Published
via MITRE·08:47 PM
Data Sourced
via MITRE·08:47 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-38420?
CVE-2023-38420 has a moderate severity rating due to the potential for information disclosure by authenticated users.
2
How do I fix CVE-2023-38420?
To fix CVE-2023-38420, update to the latest version of Intel Power Gadget software as recommended by Intel.
3
Who is affected by CVE-2023-38420?
CVE-2023-38420 affects all versions of Intel Power Gadget software on macOS.
4
What type of vulnerability is CVE-2023-38420?
CVE-2023-38420 is classified as an improper conditions check vulnerability.
5
Can CVE-2023-38420 be exploited remotely?
CVE-2023-38420 cannot be exploited remotely as it requires local access by an authenticated user.