CVE-2023-24481 - Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access

Back Back to CVE browser

MEDIUM

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access

Published Feb 14, 2024

6.3

MEDIUM

CVSS 3.1

EPSS 0.18%

Description

Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.

Affected products

Vendor n/a Product Intel(R) Thunderbolt(TM) DCH drivers for Windows Default
unaffected
Affected
- before version 88

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
n/a	Intel(R) Thunderbolt(TM) DCH drivers for Windows	unaffected	Affected before version 88

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28499
Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-28499		Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00851.html		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner intel

Published Feb 14, 2024

Updated May 8, 2025

Reserved Feb 28, 2023

Link CVE-2023-24481

CISA Vulnrichment

Updated May 8, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-24481

Red Hat

No data

ENISA EUVD

Assigner intel

Published Feb 14, 2024

Updated May 8, 2025

Link EUVD-2023-28499

GitHub

No data