CVE Vulnerabilities

CVE-2023-41090

Race Condition During Access to Alternate Channel

Published: Feb 14, 2024 | Modified: Nov 21, 2024
CVSS 3.x
6.4
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access.

Weakness

The product opens an alternate channel to communicate with an authorized user, but the channel is accessible to other actors.

Affected Software

NameVendorStart VersionEnd Version
Memory_and_storage_toolIntel*2.3 (excluding)

References